← All advisories

Critical severity9.8NVD Advisory· Published Dec 16, 2022· Updated Jun 17, 2026

CVE-2021-38241

CVE-2021-38241

Description

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework.

Affected products

3

Ruoyi/Ruoyi2 versions
cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ruoyi:ruoyi:*:*:*:*:*:*:*:*range: <4.6.1
- (no CPE)range: <4.6.1
Ruo yi/Ruoyidescription

Patches

Vulnerability mechanics

References

1

www.du1ge.com/archives/CVE-2021-38241nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.