Lucene search

K
cvelistMitreCVELIST:CVE-2020-19229
HistoryApr 05, 2022 - 3:37 p.m.

CVE-2020-19229

2022-04-0515:37:39
mitre
www.cve.org
4
jeesite java deserialization vulnerability

AI Score

8.3

Confidence

High

EPSS

0.971

Percentile

99.8%

Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter.