CNNVD-202601-1692 Information
CNNVD ID
CNNVD-202601-1692
Related CVE
- CNNVD Published: 2026-01-09
Description (Chinese)
Fastjson是Alibaba开源的一款基于Java的快速JSON解析器/生成器。 Fastjson 1.2.48之前版本存在安全漏洞，该漏洞源于自动类型处理不当，可能导致JNDI注入攻击。
Description (English)
Fast JSON solver/generationer based on Java. The previous version of Fastjson 1.2.48 had a security loophole, which stemmed from an automatic type of mishandling, which could lead to an JNDI injection attack.
Hazard Level
Low
Vulnerability Type
其他
Affected Vendor
阿里巴巴集团
Published
2026-01-09
Last Modified
2026-02-24
References
https://cert.360.cn/warning/detail?id=7240aeab581c6dc2c9c5350756079955 https://github.com/alibaba/fastjson/compare/1.2.47…1.2.48 https://github.com/vulhub/vulhub/tree/master/fastjson/1.2.47-rce https://www.cloudsek.com/blog/androxgh0st-continues-exploitation-operators-compromise-a-us-university-for-hosting-c2-logger https://www.cnvd.org.cn/flaw/show/CNVD-2019-22238 https://www.freebuf.com/vuls/208339.html https://www.seebug.org/vuldb/ssvid-98020
Patch
https://github.com/alibaba/fastjson/releases
Share on: