Remote Code Execution (RCE)

Fastjson is vulnerable to remote code execution RCE attacks. This is because it does not properly deserialize object arrays when parsing JSON objects. Note please upgrade to version 1.2.28 or higher because of compatibility issues, though it was fixed in 1.2.25...

fastjson < 1.2.24 remote code execution vulnerability

No description provided by source...