Description
Fluentd是一款开源日志收集器。Fluentd存在不安全的反序列化漏洞，此漏洞是由于应用对用户的请求验证不当导致的。
Fluentd CVE-2022-39379 不安全的反序列化漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zone.ci/aliyun/ali_nvd/48143.html
https://nvd.nist.gov/vuln/detail/CVE-2022-39379
https://securitylab.github.com/advisories/GHSL-2022-067_Fluentd/
https://github.com/advisories/GHSA-fppq-mj76-fpj2
https://access.redhat.com/security/cve/cve-2022-39379
https://security.snyk.io/vuln/SNYK-RUBY-FLUENTD-3097825