CVE-2021-3160

2021-01-2819:37:46

mitre

www.cve.org

deserialization

vulnerability

assuweb

AI Score

Confidence

High

EPSS

0.006

Percentile

78.5%

JSON

Deserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a specially crafted HTTP request, resulting in an unauthenticated remote code execution on the server.