search

alibaba / fastjson

FASTJSON 2.0.x has been released, faster and more secure, recommend you upgrade.
https://github.com/alibaba/fastjson2/wiki/fastjson_1_upgrade_cn
Apache License 2.0
25.74k stars 6.5k forks source link

找到一个新的RCE的jndi注入可用的gadget #3059

Closed ShimizuKawasaki closed 4 years ago

ShimizuKawasaki commented 4 years ago

先知编号为xianzhi-2020-01-34023267

wenshao commented 4 years ago

https://github.com/alibaba/fastjson/releases/tag/1.2.67 请用新版本