https://github.com/codeintelligencetesting/java-demo-old
Simple Java project showcases two vulnerabilities - a SQL injection and a RCE that although simplified were inspired from two real-word CVEs
https://github.com/codeintelligencetesting/java-demo-old
Last synced: 8 months ago
JSON representation
Simple Java project showcases two vulnerabilities - a SQL injection and a RCE that although simplified were inspired from two real-word CVEs
- Host: GitHub
- URL: https://github.com/codeintelligencetesting/java-demo-old
- Owner: CodeIntelligenceTesting
- Created: 2022-09-05T08:46:56.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2023-05-30T12:08:56.000Z (over 2 years ago)
- Last Synced: 2025-03-24T23:51:34.807Z (8 months ago)
- Language: Java
- Homepage:
- Size: 72.3 KB
- Stars: 4
- Watchers: 6
- Forks: 10
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Simple Java Demo
This simple Java project showcases two vulnerabilities - a SQL injection and a RCE. Although these have been distilled into simple examples they were inspired by two real CVEs that were detected.
You will be able see the two vulnerabilities that CI Fuzz detected and step into the code directly to see the underlying cause. The fixed branch is re-fuzzed and the vulnerabilities are resolved.
Inspired by:
- SQL Injection: https://nvd.nist.gov/vuln/detail/CVE-2022-24124
- RCE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3253