CVE-2019-17564-FastJson-Gadget
CVE-2019-17564-FastJson-Gadget copied to clipboard
Dor-Tumarkin
Basic code for creating the Alibaba FastJson + Spring gadget chain, as used to exploit Apache Dubbo in CVE-2019-17564 - more information available at https://www.checkmarx.com/blog/apache-dubbo-unauth...
Bumps [spring-web](https://github.com/spring-projects/spring-framework) from 5.1.9.RELEASE to 6.0.0. Release notes Sourced from spring-web's releases. v6.0.0 See What's New in Spring Framework 6.x and Upgrading to Spring Framework 6.x for upgrade instructions and...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [dubbo](https://github.com/apache/dubbo) from 2.7.3 to 2.7.15. Release notes Sourced from dubbo's releases. dubbo-2.7.15 Bugfix dubbo-spring-boot-actuator compatible with Spring Boot Actuator 2.6.x Check before use to avoid possible NPE in MetadataInfo...
Metadata
Owner
Metadata
Basic code for creating the Alibaba FastJson + Spring gadget chain, as used to exploit Apache Dubbo in CVE-2019-17564 - more information available at https://www.checkmarx.com/blog/apache-dubbo-unauth...