POJIA破甲
地图 / Untrusted deserialization issue when loading newrelic.yml file in Java agent leads to code execution on host

Untrusted deserialization issue when loading newrelic.yml file in Java agent leads to code execution on host

代码执行 / 不可信数据反序列化 / #1109620

厂商
New Relic
严重程度
未评级
赏金
$768
弱点
不可信数据反序列化
研究员
—
披露日期
—
资产
—
CVE
—

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者 见原文 · 版权归作者与 New Relic 所有

同类报告

Deserialization of untrusted data at https://www.redtube.com/media/hls?s=dataPornhub · — · $10,000Attacker can add arbitrary data to the blockchain without paying gasRootstock Labs · 2019-09-18MobileIron Unauthenticated RCE on mdm.qiwi.com with WAF bypassQIWI · —Account takeover via insecure intent handlingBasecamp · 2024-05-30SQL Injection + Insecure Deserialization leads to Remote Code Execution on https://krisp.aiKrisp · 2023-02-22Unsafe deserialization leads to token leakage in PayPal & PayPal for Business [Android]PayPal · 2021-04-30