Skip to content

SPEL漏报问题 #25

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
Sp4rks3 opened this issue May 16, 2025 · 1 comment
Open

SPEL漏报问题 #25

Sp4rks3 opened this issue May 16, 2025 · 1 comment
Labels
bug Something isn't working

Comments

@Sp4rks3
Copy link

Sp4rks3 commented May 16, 2025

审计代码为datagear4.6.0 (https://github.com/datageartech/datagear/tree/v4.6.0)
尝试使用插件复现issuse的漏洞 datageartech/datagear#32

使用sink查找器，RCE下SPEL_RCE的sink类为org.springframework.expression.ExpressionParser#parseExpression(java.lang.String)，sink方法为parseExpression。

并不能找到org.datagear.persistence.support.ConversionSqlParamValueMapper#evaluateVariableExpression中的
org.springframework.expression.common.TemplateAwareExpressionParser#parseExpression(java.lang.String)

(如是我使用方式有问题，请忽略这条issue)
@springkill
Copy link
Member

感谢issue，最近太忙忽略了很多issue，后续会跟进修复

@springkill springkill added the bug Something isn't working label Jun 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@Sp4rks3 @springkill