CVE-2021-26295 PoC — Apache OFBiz 代码问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26295.yaml

Associated Vulnerability

Title:Apache OFBiz 代码问题漏洞 (CVE-2021-26295)
Description:Apache OFBiz是美国阿帕奇（Apache）基金会的一套企业资源计划（ERP）系统。该系统提供了一整套基于Java的Web应用程序组件和工具。 Apache OFBiz prior to 17.12.06 存在安全漏洞，该漏洞源于不安全的反序列化，攻击者可利用该漏洞可以完全控制Apache OFBiz系统。

Description

Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.

File Snapshot


 id: CVE-2021-26295

info:
  name: Apache OFBiz <17.12.06 - Arbitrary Code Execution
  author: madrob

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!