Exploit for CVE-2023-25581

This Python script demonstrates the exploitation of the CVE-2023...

CVE-2023-25581

creationtimestamp| type| source ---|---|--- 2024-10-10 19:16:56+00:00| seen| https://t.me/cvedetector/7615 2024-10-21 15:07:33+00:00| seen| MISP/274f594a-8ba7-4c6e-bf6a-c52c14842867...

CVE-2023-25581 Deserialization of untrusted data in InternalAttributeHandler in pac4j

pac4j is a security framework for Java. pac4j-core prior to version 4.0.0 is affected by a Java deserialization vulnerability. The vulnerability affects systems that store externally controlled values in attributes of the UserProfile class from pac4j-core. It can be exploited by providing an...