CyberRota Analysis
AI-GeneratedA deserialization vulnerability in the Hessian2Input.readObject function of the xxl-rpc Listener component affects Java applications using alldatacenter alldata versions up to 0.6.8. This flaw allows remote attackers to exploit the system, potentially leading to unauthorized access or control over the affected applications. Organizations utilizing this software should prioritize remediation efforts due to the public availability of the exploit and the high severity rating.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in alldatacenter alldata up to 0.6.8. This affects the function Hessian2Input.readObject of the file /serialize/impl/HessianSerializer.java of the component xxl-rpc Listener. The manipulation results in deserialization. The attack may be performed from remote. The exploit is now public and may be used. The project closed the issue report as "not planned" without any further explanation.