CVE-2021-21479 PoC — SCIMono 注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21479.yaml

Associated Vulnerability

Title:SCIMono 注入漏洞 (CVE-2021-21479)
Description:Parvan Dobrev scimono是（Parvan Dobrev）开源的一个应用程序。提供一个服务器端和客户端。 SCIMono 中存在注入漏洞，攻击者有可能注入并执行java表达式，从而损害系统的可用性和完整性。以下产品及型号受到影响：SCIMono 0.0.19 之前版本。

Description

SCIMono before 0.0.19 is vulnerable to remote code execution because it is possible for an attacker to inject and
execute java expressions and compromise the availability and integrity of the system.

File Snapshot


 id: CVE-2021-21479

info:
  name: SCIMono <0.0.19 - Remote Code Execution
  author: dwisiswant0
  se

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!