CVE-2021-38241

—

CVSS 3.1

9.8 critical

EPSS

1%p62

Published

Dec 16, 2022 (Dec 16, 2022)

Modified

Jun 17, 2026

Description

Deserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary code via weak cipher in Shiro framework.

Vendors: ruoyi
Products: ruoyi
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.