5 matches found
CVE-2018-21234
Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set...
Jodd 注入漏洞
Jodd is a Java-based utility toolset. A security vulnerability exists in Jodd HTTP version v6.0.9, which stems from multiple Carriage Return Line Feed CLRF injection vulnerabilities discovered via the components jodd.http.HttpRequestset and jodd.http.HttpRequestsend. An attacker could exploit thi...
PT-2022-19738 · Jodd Http · Jodd Http
Name of the Vulnerable Software and Affected Versions: Jodd HTTP version 6.0.9 Description: The issue allows attackers to execute Server-Side Request Forgery SSRF via a crafted TCP payload, leveraging multiple CLRF injection vulnerabilities. These vulnerabilities are present in the components...
