fastjson 版本升级 fastjson <= 1.2.80 存在反序列化任意代码执行漏洞

abbfun

2022-05-23 524ad4e6ddc04f2f0cfacb33f42c2f022629bbbb

fastjson 版本升级
fastjson <= 1.2.80 存在反序列化任意代码执行漏洞

 pom.xml

@@ -24,7 +24,7 @@
        <kaptcha.version>2.3.2</kaptcha.version>

        <mybatis-spring-boot.version>2.2.2</mybatis-spring-boot.version>

        <pagehelper.boot.version>1.4.1</pagehelper.boot.version>

        <fastjson.version>1.2.80</fastjson.version>

        <fastjson.version>1.2.83</fastjson.version>

        <oshi.version>6.1.6</oshi.version>

        <commons.io.version>2.11.0</commons.io.version>

        <commons.fileupload.version>1.4</commons.fileupload.version>