Submit #545374: https://github.com/opplus/springboot-admin springboot-admin 1 RCEinfo

Titelhttps://github.com/opplus/springboot-admin springboot-admin 1 RCE
BeschreibungThe code generation feature in the backend management system utilizes a vulnerable version of Fastjson to process the tables parameter, enabling attackers to achieve remote code execution (RCE) through malicious deserialization payloads.
Quelle⚠️ https://github.com/mapl3miss/Vul/blob/main/Vul.md
Benutzer
 maple14711 (UID 83447)
Einreichung28.03.2025 12:35 (vor 1 Jahr)
Moderieren07.04.2025 13:07 (10 days later)
StatusAkzeptiert
VulDB Eintrag303691 [opplus springboot-admin bis a2d5310f44fd46780a8686456cf2f9001ab8f024 SysGeneratorController.java code Tabellen erweiterte Rechte]
Punkte16

Interested in the pricing of exploits?

See the underground prices here!