Automated Discovery of Deserialization Gadget Chains

Relution Remote Code Execution via Java Deserialization Vulnerability

Overview In this article we discuss a recent deserialization vulnerability we found in Relution (CVE-2023-48178), a mobile device management product that is popular among multinational German corporations. CVE-2023-48178 can potentially lead to ...