This vulnerability involves unsafe deserialization in the testConnection endpoint of the ADP Application Developer Platform 1.0.0 by zhilink 智互联(深圳)科技有限公司. An attacker can manipulate the jdbcUrl parameter to trigger deserialization of untrusted data remotely, potentially leading to security issues. The vulnerability has been publicly disclosed with an exploit available, but the vendor has not provided any response or fix. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed.

Successful exploitation could allow an attacker to execute arbitrary code or cause other impacts related to unsafe deserialization remotely via the jdbcUrl parameter. The medium CVSS score reflects moderate impact potential. No confirmed exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider applying workarounds such as disabling or restricting access to the vulnerable testConnection endpoint or implementing input validation and deserialization protections if possible.