CVEs-PoC/2021/CVE-2021-3160.md

CVE-2021-3160

Description

Deserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a specially crafted HTTP request, resulting in an unauthenticated remote code execution on the server.

POC

Reference

No PoCs from references.

Github

• https://github.com/ExpLangcn/FuYao-Go