CVE-2018-1335 PoC — Apache Tika 安全漏洞

Source

https://github.com/SkyBlueEternal/CVE-2018-1335-EXP-GUI

Associated Vulnerability

Title:Apache Tika 安全漏洞 (CVE-2018-1335)
Description:Apache Tika是美国阿帕奇（Apache）软件基金会的一个集成了POI（使用Java程序对Microsoft Office格式文档提供读和写功能的开源函数库）、Pdfbox（读取和创建PDF文档的纯Java类库）并为文本抽取工作提供了统一界面的内容抽取工具集合。 Apache Tika 1.7版本至1.17版本中存在安全漏洞。攻击者可借助特制的包头利用该漏洞向运行tika-server的服务器的命令行注入命令。（仅影响运行tika-server并对不可信客户端开放的产品）

Description

GUI版 EXP

File Snapshot


 [4.0K]  /data/pocs/203d66b7b4344b8c84ba4a5af7d9b28488bda21f
├── [8.8M]  CVE-2018-1335.exe
└── [  25]  ReadMe

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!