Files
CVEs-PoC/2021/CVE-2021-3160.md
2025-09-29 21:09:30 +02:00

754 B

CVE-2021-3160

Description

Deserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a specially crafted HTTP request, resulting in an unauthenticated remote code execution on the server.

POC

Reference

No PoCs from references.

Github