CVE-2020-23620

Name of the Vulnerable Software and Affected Versions Orlansoft ERP (affected versions not specified)

Description The Java Remote Management Interface of Orlansoft ERP contains a vulnerability due to insecure deserialization of user-supplied content. This can allow attackers to execute arbitrary code via a crafted serialized Java object. The issue is related to the restoration of untrusted data in memory, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.