CVE-2021-21341 PoC — XStream 代码问题漏洞

Source

https://github.com/Mani1325/ka-cve-2021-21341

Associated Vulnerability

Title:XStream 代码问题漏洞 (CVE-2021-21341)
Description:XStream是Xstream团队的一个轻量级的、简单易用的开源Java类库，它主要用于将对象序列化成XML（JSON）或反序列化为对象。 XStream 1.4.16 之前版本存在代码问题漏洞，该漏洞允许远程攻击者根据CPU类型或此类有效负载的并行执行，导致拒绝服务。

Readme

# ka-cve-2021-21341

File Snapshot


 [4.0K]  /data/pocs/fb87fba85bc9d77dcaf6f7d490f3d99ea10d06d4
├── [1.1K]  dependency-reduced-pom.xml
├── [ 131]  Dockerfile
├── [1.6K]  pom.xml
├── [  19]  README.md
├── [4.0K]  src
│   └── [4.0K]  main
│       └── [4.0K]  java
│           └── [1.9K]  main.java
└── [4.0K]  target
    ├── [4.0K]  classes
    │   └── [1.5K]  main.class
    ├── [4.0K]  maven-archiver
    │   └── [ 110]  pom.properties
    ├── [4.0K]  maven-status
    │   └── [4.0K]  maven-compiler-plugin
    │       └── [4.0K]  compile
    │           └── [4.0K]  default-compile
    │               ├── [  11]  createdFiles.lst
    │               └── [  52]  inputFiles.lst
    ├── [2.5K]  original-xstream-1.0-SNAPSHOT.jar
    └── [651K]  xstream-1.0-SNAPSHOT.jar

10 directories, 11 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!