Description
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request.
Remediation
References
https://github.com/fengjiachun/Jupiter
https://github.com/welk1n/JNDI-Injection-Exploit/releases/tag/v1.0
https://github.com/fengjiachun/Jupiter/issues/115
Related Vulnerabilities
CVE-2022-0722 Vulnerability in npm package parse-url
CVE-2021-46037 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2019-3580 Vulnerability in maven package org.openrefine:openrefine
CVE-2023-1283 Vulnerability in npm package @builder.io/qwik
CVE-2023-26120 Vulnerability in maven package com.xuxueli:xxl-job