Skip to content
OpenAdvisories

Package · Maven

ro.pippo:pippo-fastjson

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2017-18349 Public exploit Scanner template EPSS 39%

    Improper Input Validation in alilibaba:fastjson

    parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST…

    com.alibaba:fastjson ro.pippo:pippo-fastjson Maven