Critical · 9.8 CVE-2023-48887 EUVD-2023-3129GHSA-6pqx-v9g4-5hc8

Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request

Published Dec 1, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.jupiter-rpc:jupiter-rpc	<= 1.3.1	—	GHSA-6pqx-v9g4-5hc8