Unrated
In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary code.
CVE-2021-36981
First seen on SecPulse
References
- patch github.com
- patch verinice.com
- report github.com
- report secianus.de