Gfast777-Secop

**Name of the Vulnerable Software and Affected Versions** Solon versions prior to 2.3.3 **Description** A bypass in the component sofa-hessian allows attackers to execute arbitrary code via providing a crafted payload. **Recommendations** For versions prior to 2.3.3, update to version 2.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the sofa-hessian component until a patch is applied.