Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
KollectApps 代码问题漏洞
Vulnerability Description
kollect KollectApps是德国kollect（Kollect）个人开发者的一个应用软件。提供通过自动收集通过收件箱或评论向您发送联系信息的人员的电子邮件和电话号码。 KollectApps 中存在安全漏洞。该漏洞源于处理 ysoserial.payloads.CommonsCollections参数时会受到不安全的Java反序列化影响从而导致远程代码执行。 以下产品及版本受到影响：KollectApps 4.8.16c 之前版本
CVSS Information
N/A
Vulnerability Type
N/A