CVE-2019-14540

This repository contains a functional exploit for CVE-2019-14540, leveraging JNDI injection via LDAP to achieve remote code execution. The exploit uses Jackson and Fastjson deserialization to trigger the vulnerability, executing arbitrary commands (e.g., launching a calculator) on the target system.

This repository contains a vulnerable version of Jackson Databind (2.9.0) that demonstrates CVE-2019-14540, a deserialization vulnerability. The included source code and build configuration allow for testing and exploitation of the flaw.

This repository contains a vulnerable version of Jackson Databind (2.9.0) that can be used to demonstrate CVE-2019-14540, a deserialization vulnerability. The code includes the full Jackson Databind project with the vulnerable components, allowing for exploitation testing.