Alibaba

Fastjson

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-25845

Exploit
  • EPSS 89.92%
  • Published 10.06.2022 20:15:08
  • Last modified 21.11.2024 06:53:06

The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking rem...

10

CVE-2017-18349

Exploit
  • EPSS 90.63%
  • Published 23.10.2018 20:29:00
  • Last modified 21.11.2024 03:19:54

parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of ...