Description
A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.
Remediation
References
https://github.com/noear/solon/compare/v2.3.2...v2.3.3
https://github.com/noear/solon/issues/145
Related Vulnerabilities
CVE-2020-23622 Vulnerability in maven package org.fourthline.cling:cling-core
CVE-2023-35925 Vulnerability in maven package com.fastasyncworldedit:fastasyncworldedit-core
CVE-2022-25973 Vulnerability in npm package mc-kill-port
CVE-2019-13127 Vulnerability in maven package org.webjars.npm:mxgraph
CVE-2020-7693 Vulnerability in maven package org.webjars.npm:sockjs