CVE-2016-2173

CVE-2016-2173 - Spring AMQP 中的远程代码执行 - 应用测试 描述 类 org.springframework.core.serializer.DefaultDeserializer 不会根据白名单验证反序列化的对象。通过提供精心编制的序列化对象（如 Chris Frohoff 的 Commons Collection gadget），可以实现远程代码执行。 受影响版本 1.0.0 至 1.5.4 供应商 Pivotal 的 Spring 安装 - Maven 3.x+ - Java 1.7+ - RabbitMQ 运行应用漏洞 - mvn...

GHSA-HRP3-8P5W-27GV Improper Input Validation in Spring AMQP

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application, which allows an attacker to execute arbitrary code.

The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

CVE-2016-2173

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

CVE-2016-2173: Improper Input Validation

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...