cve/2021/CVE-2021-35215.md

### [CVE-2021-35215](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-35215)
![](https://img.shields.io/static/v1?label=Product&message=Orion%20Platform%20&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2020.2.5%20and%20previous%20versions%20%3C%202020.2.6%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-502%20Deserialization%20of%20Untrusted%20Data&color=brighgreen)

### Description

Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/BLACKHAT-SSG/MindMaps2
- https://github.com/Lazykakarot1/Learn-365
- https://github.com/PwnAwan/MindMaps2
- https://github.com/Y4er/CVE-2021-35215
- https://github.com/Y4er/dotnet-deserialization
- https://github.com/harsh-bothra/learn365
- https://github.com/nomi-sec/PoC-in-GitHub