CVE-2019-6503

Published: Jan 22, 2019Modified: Jun 17, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

There is a deserialization vulnerability in Chatopera cosin v3.10.0. An attacker can execute commands during server-side deserialization by uploading maliciously constructed files. This is related to the TemplateController.java impsave method and the MainUtils toObject method.

Affected (1)

Products: Chatopera: Cosin

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Chatopera Cosin	Version 3.10.0

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://github.com/chatopera/cosin/issues/177

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/chatopera/cosin/issues/177

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.