← All advisories

Critical severity9.8NVD Advisory· Published Dec 16, 2022· Updated Jun 17, 2026

CVE-2021-38241

CVE-2021-38241

Description

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework.

Affected products

2

Ruo yi/Ruoyidescription
Ruoyi/Ruoyillm-fuzzy
Range: <4.6.1

Patches

Vulnerability mechanics

References

1

www.du1ge.com/archives/CVE-2021-38241nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.