Submit #545374: https://github.com/opplus/springboot-admin springboot-admin 1 RCEinfo

Titlehttps://github.com/opplus/springboot-admin springboot-admin 1 RCE
DescriptionThe code generation feature in the backend management system utilizes a vulnerable version of Fastjson to process the tables parameter, enabling attackers to achieve remote code execution (RCE) through malicious deserialization payloads.
Source⚠️ https://github.com/mapl3miss/Vul/blob/main/Vul.md
User
 maple14711 (UID 83447)
Submission03/28/2025 12:35 (2 years ago)
Moderation04/07/2025 13:07 (10 days later)
StatusAccepted
VulDB entry303691 [opplus springboot-admin up to a2d5310f44fd46780a8686456cf2f9001ab8f024 SysGeneratorController.java code tables deserialization]
Points16

Do you need the next level of professionalism?

Upgrade your account now!