Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-914346736888D7883EDD1348D32E091EHistoryOct 23, 2018 - 12:00 a.m.
Improper Input Validation
2018-10-2300:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
7
0.322 Low
EPSS
Percentile
97.0%
Fastjson allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is mishandled in AjaxApplication.java.
| CPE | Name | Operator | Version |
|---|---|---|---|
| maven/com.alibaba/fastjson | lt | 1.2.25 |
References
Related
veracode
veracode
Remote Code Execution (RCE)
2017-03-16 07:44:26
nvd
nvd
CVE-2017-18349
2018-10-23 20:29:00
github
github
Improper Input Validation in alilibaba:fastjson
2018-10-24 19:42:03
osv
osv
CVE-2017-18349
2018-10-23 20:29:00
Improper Input Validation in alilibaba:fastjson
2018-10-24 19:42:03
cvelist
cvelist
CVE-2017-18349
2022-10-03 16:23:15
prion
prion
Cross site request forgery (csrf)
2018-10-23 20:29:00
cve
cve
CVE-2017-18349
2022-10-03 16:23:15