DataEase RCE via Spring Deserialization (CVE-2024-45534) with POC

Vulnerability Overview This vulnerability is a Remote Code Execution (RCE) flaw primarily affecting the project. The CVE ID is CVE-2024-45534, and its severity is classified as High. Impact Scope Affected Versions: Fixed Version: Remediation It is recommended to upgrade to version or later to resolve this vulnerability. POC Code Below is the Proof of Concept (POC) code for exploiting the vulnerability: Exploitation Steps 1. Prepare Malicious XML File: Create a malicious XML file using the POC code provided above. 2. Start Local HTTP Server: Launch a local HTTP server using the following command: 3. Write Malicious File to Specified Directory: Place the malicious XML file into the directory specified by . 4. Send Malicious Request: Send the following malicious request: ```http POST /dataease/api/v1/login HTTP/1.1 Host: 192.168.1.100:8080 Content-Type: application/json Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Origin: http://192.168.1.100:8080 Referer: http://192.168.1.100:8080/ Accept-Language: zh-CN Content-Length: 568 {"username":"admin","password":"admin","captcha":"123456","captchaKey":"123456","rememberMe":"true","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","loginMethod":"password","loginSource":"password","loginType":"password","login

Goal Reached Thanks to every supporter — we hit 100%!

DataEase RCE via Spring Deserialization (CVE-2024-45534) with POC

More from this source