Description
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request.
Remediation
References
https://github.com/fengjiachun/Jupiter
https://github.com/fengjiachun/Jupiter/issues/115
https://github.com/welk1n/JNDI-Injection-Exploit/releases/tag/v1.0
Related Vulnerabilities
CVE-2018-11776 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2018-3723 Vulnerability in npm package defaults-deep
CVE-2020-7746 Vulnerability in maven package org.webjars.bower:chart.js
CVE-2019-5458 Vulnerability in npm package http-file-server
CVE-2018-20677 Vulnerability in maven package org.webjars.bower:bootstrap