We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
https://github.com/mbechler/marshalsec/blob/master/marshalsec.pdf
from the paper, we can know there are some vulnerabilities when Unmarshall hessian
https://github.com/mbechler/marshalsec
we have provided some filters in
com.caucho.hessian.io.Hessian2Input#readObjectDefinition
com.alipay.hessian.internal.InternalNameBlackListFilter is a filter which contains classes which have vulnerabilities to hacking.
what we need to do is add more classes which have vulnerabilities to the list that provided from our security team.
The text was updated successfully, but these errors were encountered:
这个问题没有任何具体的描述吗?
Sorry, something went wrong.
更新了下.
No branches or pull requests
https://github.com/mbechler/marshalsec/blob/master/marshalsec.pdf
from the paper, we can know there are some vulnerabilities when Unmarshall hessian
https://github.com/mbechler/marshalsec
we have provided some filters in
com.alipay.hessian.internal.InternalNameBlackListFilter is a filter which contains classes which have vulnerabilities to hacking.
what we need to do is add more classes which have vulnerabilities to the list that provided from our security team.
The text was updated successfully, but these errors were encountered: