[{ "CVE": "FastJson-1.2.47", "CVSS": 9.8, "DESC": "FASTJSON 1.2.47 及以下版本存在 RCE 漏洞,利用条件较低,危害较大" }, { "CVE": "FastJson-1.2.68", "CVSS": 9.8, "DESC": "FastJson 1.2.68 及以下版本存在 RCE 漏洞,有一定利用条件" }, { "CVE": "FastJson-1.2.80", "CVSS": 8.1, "DESC": "FastJson 1.2.80 及以下版本存在 RCE 漏洞,有较高利用条件" }, { "CVE": "CVE-2021-45105", "CVSS": 5.9, "DESC": "Apache Log4j2 可能由于不受限制的递归导致拒绝服务" }, { "CVE": "CVE-2021-45046", "CVSS": 9.0, "DESC": "Apache Log4j2 2.15.0 修复不完善,存在拒绝服务和 RCE 漏洞" }, { "CVE": "CVE-2021-44228", "CVSS": 10.0, "DESC": "Apache Log4j2 著名的 Log4Shell 漏洞,利用条件低,危害极大" }, { "CVE": "CVE-2021-44832", "CVSS": 6.6, "DESC": "Apache Log4j2 JDBC Appender 配置可控时存在 RCE 漏洞" }, { "CVE": "CVE-2023-46749", "CVSS": 6.5, "DESC": "Apache Shiro 开启 rewriting 存在目录遍历漏洞" }, { "CVE": "CVE-2023-46750", "CVSS": 6.1, "DESC": "Apache Shiro 开启 form 存在开放重定向漏洞" }, { "CVE": "CVE-2023-34478", "CVSS": 9.8, "DESC": "Apache Shiro 某些情况存在目录遍历导致权限绕过" }, { "CVE": "CVE-2023-22602", "CVSS": 7.5, "DESC": "Apache Shiro 配合 SpringBoot 可能存在权限绕过" }, { "CVE": "CVE-2022-40664", "CVSS": 9.8, "DESC": "Apache Shiro 存在权限绕过漏洞" }, { "CVE": "CVE-2022-32532", "CVSS": 9.8, "DESC": "Apache Shiro 使用 RegExPatternMatcher 存在权限绕过漏洞" }, { "CVE": "CVE-2021-41303", "CVSS": 9.8, "DESC": "Apache Shiro 配合 SpringBoot 可能存在权限绕过" }, { "CVE": "CVE-2020-17523", "CVSS": 9.8, "DESC": "Apache Shiro 配合 Spring 可能存在权限绕过" }, { "CVE": "CVE-2020-17510", "CVSS": 9.8, "DESC": "Apache Shiro 配合 Spring 可能存在权限绕过" }, { "CVE": "CVE-2020-13933", "CVSS": 7.5, "DESC": "Apache Shiro 存在权限绕过漏洞" }, { "CVE": "CVE-2020-11989", "CVSS": 9.8, "DESC": "Apache Shiro 配合 Spring 存在权限绕过漏洞" }, { "CVE": "CVE-2020-1957", "CVSS": 9.8, "DESC": "Apache Shiro 配合 Spring 存在权限绕过漏洞" }, { "CVE": "CVE-2019-12422", "CVSS": 9.8, "DESC": "Apache Shiro Padding Oracle 反序列化漏洞" }, { "CVE": "CVE-2016-6802", "CVSS": 7.5, "DESC": "Apache Shiro 存在权限绕过漏洞" }, { "CVE": "CVE-2016-4437", "CVSS": 9.8, "DESC": "Apache Shiro 反序列化漏洞" }, { "CVE": "CVE-2014-0074", "CVSS": 7.5, "DESC": "Apache Shiro LDAP 存在权限绕过漏洞" }, { "CVE": "CVE-2010-3863", "CVSS": 5.0, "DESC": "Apache Shiro /./account/index.jsp 权限绕过漏洞" }]