Skip to content
OpenAdvisories
Unscored CVE-2020-19229 EUVD-2020-11136GHSA-v28f-cf4w-7rcj

Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerabil…

Published Apr 5, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter.

References