修复 snakeyaml loadJar 漏洞利用封装 bug（thx @Ch1ngg）

2026-09-22 01:30:43 +08:00 · 2024-07-23 23:03:41 +08:00
parent ce1be0dda9
commit 70c7b7013d
1 changed files with 1 additions and 1 deletions
@@ -62,6 +62,6 @@ public class CtClassUtil {
    // snakeyaml loadJar 的利用需要实现 ScriptEngineFactory 接口
    public void applySnakeYamlScriptEngineFactory() throws Exception {
        config.setImplementsScriptEngineFactory(true);
-        JavassistUtil.addAnnotation(ctClass, "javax.script.ScriptEngineFactory");
+        JavassistUtil.implementInterface(ctClass, "javax.script.ScriptEngineFactory");
    }
 }