CVE-2024-38816 PoC — VMware Spring Framework 安全漏洞

Source

https://github.com/Anthony1078/App-vulnerable

Associated Vulnerability

Title:VMware Spring Framework 安全漏洞 (CVE-2024-38816)
Description:VMware Spring Framework是美国威睿（VMware）公司的一套开源的Java、JavaEE应用程序框架。该框架可帮助开发人员构建高质量的应用。 VMware Spring Framework存在安全漏洞，该漏洞源于存在目录遍历漏洞，允许攻击者通过精心构造的HTTP请求访问或操作服务器上本不应该被访问的文件。受影响版本如下:5.3.0至5.3.39版本、6.0.0至6.0.23版本和6.1.0至6.1.12版本。

Description

 CVE-2024-38816

File Snapshot


 [4.0K]  /data/pocs/47cb3869364b6406feb975351ce6c6a5d282b850
├── [ 10K]  mvnw
├── [6.9K]  mvnw.cmd
├── [1.5K]  pom.xml
└── [4.0K]  src
    ├── [4.0K]  main
    │   ├── [4.0K]  java
    │   │   └── [4.0K]  pe
    │   │       └── [4.0K]  edu
    │   │           └── [4.0K]  upc
    │   │               └── [4.0K]  App
    │   │                   └── [4.0K]  vulnerable
    │   │                       ├── [ 332]  AppVulnerableApplication.java
    │   │                       └── [4.0K]  Controller
    │   │                           └── [1.2K]  FileController.java
    │   └── [4.0K]  resources
    │       └── [  39]  application.properties
    └── [4.0K]  test
        └── [4.0K]  java
            └── [4.0K]  pe
                └── [4.0K]  edu
                    └── [4.0K]  upc
                        └── [4.0K]  App
                            └── [4.0K]  vulnerable
                                └── [ 224]  AppVulnerableApplicationTests.java

17 directories, 7 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!