Description
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request.
Remediation
References
https://github.com/fengjiachun/Jupiter
https://github.com/fengjiachun/Jupiter/issues/115
https://github.com/welk1n/JNDI-Injection-Exploit/releases/tag/v1.0
Related Vulnerabilities
CVE-2020-7707 Vulnerability in maven package org.webjars.npm:property-expr
CVE-2020-36183 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2020-7607 Vulnerability in npm package gulp-styledocco
CVE-2021-44906 Vulnerability in maven package org.webjars.bowergithub.substack:minimist
CVE-2020-28472 Vulnerability in maven package org.webjars.bower:aws-sdk