Exploiting Commons BeanUtils 1.8.3 for Java Deserialization Attacks
Environment and Dependencies
JDK: 8u66
Commons BeanUtils: 1.8.3 (the final POC also works with 1.9.2; exact version depends on the target server)
<dependency>
<groupId>commons-beanutils</groupId>
<artifactId>commons-beanutils</artifactId>
<version>1.8.3</version>
</dependency>
Core ...
Posted on Fri, 04 Sep 2026 16:18:10 +0000 by tylrwb