RuoYI 4.2 (Shiro 1.4.1) Shiro-721 Vulnerability Reproduction Environment

Used to reproduce the Shiro-721 vulnerability (CVE-2019-12422) on RuoYI.

Note: This service contains critical vulnerabilities and is intended only for vulnerability reproduction purposes. Do not use in production environments.

Clone

To facilitate the installation of specific versions of Maven and JDK, the repository uses git lfs to manage large files, so git lfs clone is required.

It is unclear whether this violates the JDK distribution policies; if it does, I will promptly delete.

Start

docker-compose up -d

Versions

• JDK 1.8 (8u65)
• MySQL 5.7
• Maven 3.0
• Base Ubuntu:22.04

Configuration Parameters