vendor:
N/A
by:
intx0x80
9,3
CVSS
HIGH
Remote Code Execution
94
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
JSP Remote Code Execution Vulnerability
This exploit is a JSP Remote Code Execution vulnerability which allows an attacker to execute arbitrary code on the vulnerable server. The vulnerability is caused by the lack of input validation and the use of user-supplied data in the JSP code. The attacker can exploit this vulnerability by sending a specially crafted HTTP request containing malicious code to the vulnerable server. The malicious code will then be executed on the server, allowing the attacker to gain access to the server and execute arbitrary code.
Mitigation:
Input validation should be used to prevent malicious code from being executed on the server. Additionally, the application should be configured to only allow trusted users to access the application.
