CVE-2020-36179

This repository provides a functional exploit PoC for CVE-2020-36180, demonstrating RCE via Jackson deserialization gadgets targeting `org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS`. The PoC includes a Maven project with dependencies, a malicious SQL script, and Java code to trigger the vulnerability.

This repository contains a functional exploit for CVE-2020-36179, a deserialization vulnerability in Jackson Databind. The PoC includes Java source code demonstrating the vulnerability, along with build and execution scripts.

This repository contains a vulnerable version of Jackson Databind (2.9.0) that is susceptible to CVE-2020-36179, a deserialization vulnerability. The included source code and build configuration allow for testing and exploitation of the vulnerability.