Deserialization of untrusted data

2022-12-1622:15:00

PRIOn knowledge base

www.prio-n.com

deserialization

ruoyi

remote code execution

weak cipher

shiro framework

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.4%

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework.

CPENameOperatorVersion
ruoyilt4.6.1

CPE	Name	Operator	Version
	ruoyi	lt	4.6.1

References

www.du1ge.com/archives/CVE-2021-38241