CVE-2021-38241

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

CVE-2021-38241

creationtimestamp| type| source ---|---|--- 2022-12-17 00:24:42+00:00| seen| https://t.me/cibsecurity/54791...

CVE-2021-38241

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

CVE-2021-38241

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework...

CVE-2021-38241

CVE-2021-38241 describes a deserialization vulnerability in Ruoyi prior to 4.6.1 that allows remote code execution via a weak cipher in the Shiro framework. The issue is triggered during deserialization of untrusted data, enabling attackers to run arbitrary code on affected systems. The CVSS v3.1...