parquet-rce-poc-CVE-2025-30065

CVE-2025-30065 This repository illustrates how to exploit CVE-2025-30065 and achieve remote class instantiation and trigger a network request from within the victim application i.e the JVM thereby achieving SSRF. The generated parquet in Malicious.java assumes that the class RCEPayload.java is...

Exploit for Deserialization of Untrusted Data in Apache Parquet_Java

CVE-2025-30065 This repository illustrates how to exploit CVE...