Submit #545374: https://github.com/opplus/springboot-admin springboot-admin 1 RCEinfo

Titlehttps://github.com/opplus/springboot-admin springboot-admin 1 RCE
DescriptionThe code generation feature in the backend management system utilizes a vulnerable version of Fastjson to process the tables parameter, enabling attackers to achieve remote code execution (RCE) through malicious deserialization payloads.
Source⚠️ https://github.com/mapl3miss/Vul/blob/main/Vul.md
User
 maple14711 (UID 83447)
Submission03/28/2025 12:35 (1 Year ago)
Moderation04/07/2025 13:07 (10 days later)
StatusAccepted
VulDB entry303691 [opplus springboot-admin up to a2d5310f44fd46780a8686456cf2f9001ab8f024 SysGeneratorController.java code Tables deserialization]
Points16

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!