CVEs-PoC/2016/CVE-2016-2173.md

CVE-2016-2173

Description

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/AdeliaNitzsche/Java-Deserialization-Cheat-Sheet
• https://github.com/BrittanyKuhn/javascript-tutorial
• https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
• https://github.com/HaToan/CVE-2016-2173
• https://github.com/PalindromeLabs/Java-Deserialization-CVEs
• https://github.com/klausware/Java-Deserialization-Cheat-Sheet
• https://github.com/langu-xyz/JavaVulnMap
• https://github.com/mishmashclone/GrrrDog-Java-Deserialization-Cheat-Sheet