Sollace Unicopia version 1.1.1 and before was discovered to deserialize untrusted data, allowing attackers to execute arbitrary code.
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Link | Tags |
---|---|
https://gist.github.com/apple502j/4ab77291c98e45f4a5bf780c8eda8afa | third party advisory |