Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-22855

Soar Cloud System Co., Ltd. HR Portal - Arbitrary Code Execution

Description

The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Soar Cloud System Co., Ltd. HR Portal

  • 0 7.3.2020.1013affected

References