摘要: commit:https://github.com/spring-projects/spring-data-commons/commit/ae1dd2741ce06d44a0966ecbd6f47beabde2b653 由于StandardEvaluationContext权限过大,可以执行任意代码 阅读全文
posted @ 2022-08-29 15:10 Cold灬 阅读(730) 评论(0) 推荐(0) 编辑
摘要: commit:https://github.com/spring-attic/spring-security-oauth/commit/fff77d3fea477b566bcacfbfc95f85821a2bdc2d poc:http://localhost:8080/oauth/authorize 阅读全文
posted @ 2022-08-29 15:03 Cold灬 阅读(41) 评论(0) 推荐(0) 编辑