5 matches found
CVE-2021-38241
Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...
CVE-2021-38241
creationtimestamp| type| source ---|---|--- 2022-12-17 00:24:42+00:00| seen| https://t.me/cibsecurity/54791...
CVE-2021-38241
Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...
CVE-2021-38241
CVE-2021-38241 describes a deserialization vulnerability in Ruoyi prior to 4.6.1 that allows remote code execution via a weak cipher in the Shiro framework. The issue is triggered during deserialization of untrusted data, enabling attackers to run arbitrary code on affected systems. The CVSS v3.1...
