PT-2018-6845

Name of the Vulnerable Software and Affected Versions: Fastjson versions prior to 1.2.25 Pippo version 1.11.0 Description: The issue allows remote attackers to execute arbitrary code via a crafted JSON request. This can be achieved by sending a crafted rmi:// URI in the dataSourceName field of HT...