fastjson 版本升级 fastjson <= 1.2.80 存在反序列化任意代码执行漏洞

abbfun

2022-05-23 524ad4e6ddc04f2f0cfacb33f42c2f022629bbbb

 ruoyi-common/src/main/java/com/ruoyi/common/filter/XssHttpServletRequestWrapper.java

@@ -80,7 +80,8 @@
            }



            @Override

            public int available() throws IOException {

            public int available() throws IOException

            {

                return jsonBytes.length;

            }