Deserialization of untrusted data by Fastjson library leads to RCE

Threat Advisories

Deserialization of untrusted data by Fastjson library leads to RCE

Threat Level
Vulnerability Report

For a detailed advisory, download the pdf file here

Summary

Applications using the Fastjson java library are impacted by remote code execution vulnerability.