spring 5.3.19 CVE-2022-22968: Spring Framework Data Binding Rules Vulnerability

This commit is contained in:
MaxKey
2022-04-14 09:52:19 +08:00
parent 786ca40b3c
commit 6bb6aa6d69
6 changed files with 7 additions and 31 deletions

View File

@@ -180,7 +180,7 @@ public class LoginEntryPoint {
public String produceOtp(@PathVariable("mobile") String mobile,HttpServletRequest request) {
UserInfo queryUserInfo=userInfoService.findByEmailMobile(mobile);
if(queryUserInfo!=null) {
otpAuthnService.getByInstId(WebContext.getInst(request)).produce(queryUserInfo);
//otpAuthnService.getByInstId(WebContext.getInst(request)).produce(queryUserInfo);
return "ok";
}