The project has a shiro deserialization vulnerability

[linkinyy]

1. First, build the environment locally to access the backend management system.
   
2. You can see that the project's pom.xml file relies on the vulnerable shiro package.
   
3. Using ShiroAttack2 Tools for vulnerability detection. Tool link:https://github.com/SummerSec/ShiroAttack2
   
   You can see that Shiro’s secret key was revealed during the explosion.
4. Detect current Shiro’s exploit chain
   
5. The whoami command was executed successfully, confirming that the vulnerability exists