VDB
BDU%3A2022-03553
BDU%3A2022-03553
PUBLISHED
CVSS 10 CRITICAL
Уязвимость механизма AutoTypeCheck библиотеки языка программирования Java Fastjson, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba | FastJson |
Timeline
- Jun 21, 2022 CVE Published
References
- https://github.com/alibaba/fastjson/commit/8f3410f81cbd437f7c459f8868445d50ad301f15 url
- https://github.com/alibaba/fastjson/releases/tag/1.2.83 url
- https://github.com/alibaba/fastjson/wiki/security_update_20220523 url
- https://snyk.io/vuln/SNYK-JAVA-COMALIBABA-2859222 url
- https://www.ddosi.org/fastjson-poc/ url
- https://github.com/alibaba/fastjson/wiki/fastjson_safemode url
- https://github.com/alibaba/fastjson/commit/35db4adad70c32089542f23c272def1ad920a60d advisory