漏洞描述
探测存在fastjson反序列化并存在commons.io
fastjson v1.2.68 Commons IO 2.x 写文件利用链探测
PoC代码
暂无相关漏洞推荐
- POC CVE-2025-1302: JSONPath Plus < 10.3.0 - Remote Code Execution
- fastjson-rce-all: Fastjson Deserialization RCE
- hikvision-center-fastjson-rce: 海康威视综合安防-运行管理中心-Fastjson-远程命令执行漏洞
- POC CVE-2017-18349: Fastjson Insecure Deserialization - Remote Code Execution
- POC CVE-2020-28429: geojson2kml - Command Injection
- POC landray-oa-datajson-rce: Landray OA Datajson RCE
- POC yunanbao-authservice-fastjson-rce: 云匣子 FastJson反序列化RCE漏洞
- POC config-json-exposure-fuzz: Exposed JSON Configuration Files
- POC config-json: Configuration File - Detect
- POC auth-json: Auth.json File - Disclosure
- POC azuredeploy-json: Azure Resource Manager Template - File Exposure
- POC composer-auth-json: Composer-auth Json File Disclosure
- POC credentials-json: Credentials File Disclosure