kalvinGit/kvf-admin

kalvinGit/kvf-admin

GitHubGitHub
GitHubgithub.com
kvfadmin.kalvinbg.cnkvfadmin.kalvinbg.cn
Releases0
Stars475
kvf-admin是一套基于springboot、mybatis、shiro及layui的轻量级快速开发框架、脚手架、后台管理系统、权限系统、基于activiti6整合的工作流OA系统，上手简单，拿来即用。
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-35857↗
9.8 CRITICAL—

kvf-admin through 2022-02-12 allows remote attackers to execute arbitrary code because deserialization is mishandled. The rememberMe parameter is encrypted with a hardcoded key from the com.kalvin.kvf.common.shiro.ShiroConfig file.