漏洞描述
Fastjson是一款基于Java的快速JSON解析器/生成器。 Fastjson 1.2.83 之前版本存在安全漏洞，该漏洞源于容易绕过默认的 autoType 关闭限制来反序列化不受信任的数据，攻击者利用该漏洞可以攻击远程服务器。
Fastjson <1.2.83 远程代码执行漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2025-1302: JSONPath Plus < 10.3.0 - Remote Code Execution
- fastjson-rce-all: Fastjson Deserialization RCE
- hikvision-center-fastjson-rce: 海康威视综合安防-运行管理中心-Fastjson-远程命令执行漏洞
- POC CVE-2017-18349: Fastjson Insecure Deserialization - Remote Code Execution
- POC CVE-2020-28429: geojson2kml - Command Injection
- POC landray-oa-datajson-rce: Landray OA Datajson RCE
- POC yunanbao-authservice-fastjson-rce: 云匣子 FastJson反序列化RCE漏洞
- POC config-json-exposure-fuzz: Exposed JSON Configuration Files
- POC config-json: Configuration File - Detect
- POC auth-json: Auth.json File - Disclosure
- POC azuredeploy-json: Azure Resource Manager Template - File Exposure
- POC composer-auth-json: Composer-auth Json File Disclosure
- POC credentials-json: Credentials File Disclosure