CVE-2023-35839

CriticalCVSS 9.8

Published: 19/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.98%

58th percentile - higher than 58% of all known CVEs

A vulnerability in the sofa-hessian component of Solon before v2.3.3 allows attackers to execute arbitrary code by providing crafted payload.

Organizations may be exposed to remote code execution, potentially leading to serious security breaches and data loss.

It is recommended to upgrade to Solon version 2.3.3 or later to mitigate this vulnerability.

Original NVD description (English source)

A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.