未評価
In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary code.
CVE-2021-36981
SecPulse初出
参照URL
- patch github.com
- patch verinice.com
- report github.com
- report secianus.de