CVE-2019-14540 PoC — FasterXML jackson-databind 代码问题漏洞

Source

https://github.com/LeadroyaL/cve-2019-14540-exploit

Associated Vulnerability

Title:FasterXML jackson-databind 代码问题漏洞 (CVE-2019-14540)
Description:FasterXML jackson-databind是FasterXML公司的一个基于JAVA可以将XML和JSON等数据格式与JAVA对象进行转换的库。Jackson可以轻松的将Java对象转换成json对象和xml文档，同样也可以将json、xml转换成Java对象。 FasterXML jackson-databind 2.9.10之前版本中存在代码问题漏洞。攻击者可利用该漏洞执行代码。

Description

CVE-2019-14540 Exploit

File Snapshot


 [4.0K]  /data/pocs/9302fd4047e58ca6c28dd47b258a987b7b382308
├── [ 358]  build.gradle
├── [1.0M]  demo.png
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 54K]  gradle-wrapper.jar
│       └── [ 202]  gradle-wrapper.properties
├── [5.2K]  gradlew
├── [2.2K]  gradlew.bat
├── [ 840]  readme.md
├── [4.0K]  remote_codebase
│   └── [ 537]  Exploit.java
├── [  45]  settings.gradle
└── [4.0K]  src
    └── [4.0K]  main
        └── [4.0K]  java
            └── [4.0K]  com
                └── [4.0K]  leadroyal
                    └── [4.0K]  cve_2019_14540
                        └── [1.2K]  Main.java

9 directories, 10 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!