CVE-2021-27335

KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...

CVE-2021-27335

CVE-2021-27335 affects KollectApps prior to 4.8.16c due to insecure Java deserialization. The root cause is deserializing untrusted data, enabling Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter. The vulnerability allows an attacker who can reach the application to tri...