TI-2024-31372 CVE-2024-46983 · GHSA-c459-2m73-67hj
Remote Command Execution(RCE) Vulnerbility in sofa-hessian
Priority MEDIUM 50
sofa-hessian is an internal improved version of Hessian3/4 powered by Ant Group CO., Ltd.
Vulnerabilities
2 records
TI-2019-06668 CVE-2019-9212 · GHSA-pfwp-8pq4-g7pv
SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a…
Priority MEDIUM 47
SOFA-Hessian through 4.0.2 allows remote attackers to execute arbitrary commands via a crafted serialized Hessian object because blacklisting of com.caucho.naming.QName and com.sun.org.apache.xpath.internal.objects.XStri…