Description
WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Uniong | WebITR | ≤ 2_1_0_34 | — |