{"provider_name":"Hatena Blog","blog_url":"https://takahashikzn.root42.jp/","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Ftakahashikzn.root42.jp%2Fentry%2F2017%2F03%2F08%2F132147\" title=\" Struts2\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u8106\u5f31\u6027(CVE-2017-5638)\u3092\u5206\u6790\u3057\u305f - R42\u65e5\u8a18\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","author_name":"takahashikzn","url":"https://takahashikzn.root42.jp/entry/2017/03/08/132147","provider_url":"https://hatena.blog","description":"\u307e\u305fOGNL\u7d61\u307f\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002 \u30a2\u30a6\u30c8\u30e9\u30a4\u30f3\u306fid:Kango\u6c0f\u304c\u307e\u3068\u3081\u3066\u3044\u308b\u3053\u3061\u3089\u304c\u53c2\u8003\u306b\u306a\u308a\u307e\u3059\u3002 http://d.hatena.ne.jp/Kango/20170307/1488907259 \u3055\u3066\u3001\u3053\u306e\u8106\u5f31\u6027\u306e\u52d5\u4f5c\u539f\u7406\u3092\u8abf\u3079\u3066\u307f\u307e\u3057\u305f\u3002 \u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u6642\u306e\u30d8\u30c3\u30c0\u306e\u51e6\u7406\u65b9\u5f0f\u306b\u554f\u984c\u304c\u3042\u308b\u3088\u3046\u3067\u3059\u3002 \u524d\u8ff0\u306eURL\u3067\u8ff0\u3079\u3089\u308c\u3066\u3044\u308bPoC\u306f\u3053\u3093\u306a\u611f\u3058\u3002 import requests import sys def poc(url): payload = \"%{(#test='multipart/form-data').(#dm=@ognl.OgnlContext@DEFAULT\u2026","height":"190","type":"rich","width":"100%","blog_title":"R42\u65e5\u8a18","version":"1.0","categories":["Struts2"],"published":"2017-03-08 13:21:47","author_url":"https://blog.hatena.ne.jp/takahashikzn/","title":" Struts2\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u8106\u5f31\u6027(CVE-2017-5638)\u3092\u5206\u6790\u3057\u305f","image_url":null}