GHSA-XJRR-XV9M-4PW5 Improper Input Validation in alilibaba:fastjson

parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST data to the Pippo /json URI, which is...

PT-2018-6845

Name of the Vulnerable Software and Affected Versions: Fastjson versions prior to 1.2.25 Pippo version 1.11.0 Description: The issue allows remote attackers to execute arbitrary code via a crafted JSON request. This can be achieved by sending a crafted rmi:// URI in the dataSourceName field of HT...