critical9.8
CVE-2023-48887
Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request
Impact
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.jupiter-rpc:jupiter-rpc | <= 1.3.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fengjiachun | Jupiter | Version 1.3.1 |