5 matches found
CVE-2021-27335
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
Deserialization of untrusted data
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
CVE-2021-27335
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
CVE-2021-27335: Deserialization of Untrusted Data
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...
PT-2021-17401
Name of the Vulnerable Software and Affected Versions KollectApps versions prior to 4.8.16c Description The issue is related to insecure Java deserialization, which can lead to Remote Code Execution. This is achieved via a ysoserial.payloads.CommonsCollections parameter. Recommendations For...