openEQUELLA authenticated RCE chain(s)
Authenticated deserialization flaws in openEQUELLA can be chained into remote code execution.
A Full Disclosure post by evan describes authenticated deserialization vulnerabilities in openEQUELLA that can be chained to remote code execution. openEQUELLA is an open-source digital repository for educational material and is widely used by Australian universities. The report links to a technical write-up but does not name a CVE or state that exploitation is ongoing.
- Authenticated deserialization can be chained to remote code execution.
- openEQUELLA is an open-source repository for educational material.
- The software is widely used by Australian universities.
- No CVE or active exploitation is stated in the post.
- Products
- openEQUELLA
- Countries
- Australia
From the original article
Posted by evan via Fulldisclosure on Sep 26 SUMMARY: an authenticated deserialization vuln in openEQUELLA allows https://blog. evan. lat/posts/openeq/ openequella is an "open source digital repository" for educational material.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.