CVE:CVE-2020-5245
CNNVD:CNNVD-202002-1110
Dropwizard-Validation 1.3.19之前版本和2.0.2之前版本中的自我验证功能存在注入漏洞。远程攻击者可借助任意Java表达式利用该漏洞在系统上执行任意代码。
solution:Upgrade dropwizard dropwizard_validation to a higher version than 1.3.19,2.0.2,and avoid the version (,1.3.19),[2.0.0,2.0.2); Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2)