Added vulnerable parts to the gradle and maven projects

turalsalamov · turalsalamov · commit 1d261909f791 · 2023-07-12T10:11:01.000+02:00
diff --git a/java/gradle/src/main/java/com/example/ExploreMe.java b/java/gradle/src/main/java/com/example/ExploreMe.java
@@ -9,8 +9,8 @@ public static void exploreMe(int a, int b, String c) {
                     if (c.startsWith("@")) {
                         String className = c.substring(1);
                         try {
-                            Class.forName(className);
-                        } catch (ClassNotFoundException ignored) {
+                            Class.forName(className).newInstance();
+                        } catch (ClassNotFoundException | InstantiationException | IllegalAccessException ignored) {
                         }
                     }
                 }
diff --git a/java/maven/src/main/java/com/example/ExploreMe.java b/java/maven/src/main/java/com/example/ExploreMe.java
@@ -9,8 +9,8 @@ public static void exploreMe(int a, int b, String c) {
                     if (c.startsWith("@")) {
                         String className = c.substring(1);
                         try {
-                            Class.forName(className);
-                        } catch (ClassNotFoundException ignored) {
+                            Class.forName(className).newInstance();
+                        } catch (ClassNotFoundException | InstantiationException | IllegalAccessException ignored) {
                         }
                     }
                 }

Original file line number	Diff line number	Diff line change
`@@ -9,8 +9,8 @@ public static void exploreMe(int a, int b, String c) {`
`9`	`9`	`if (c.startsWith("@")) {`
`10`	`10`	`String className = c.substring(1);`
`11`	`11`	`try {`
`12`		`- Class.forName(className);`
`13`		`- } catch (ClassNotFoundException ignored) {`
	`12`	`+ Class.forName(className).newInstance();`
	`13`	`+ } catch (ClassNotFoundException \| InstantiationException \| IllegalAccessException ignored) {`
`14`	`14`	`}`
`15`	`15`	`}`
`16`	`16`	`}`