Unrated
In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code execute
CVE-2021-31649
First seen on SecPulse
Original description The description as published by the source.
In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code execute
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- report note.youdao.com
- report note.youdao.com