Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-7559 PoC — Red Hat Undertow 安全漏洞

Source
https://github.com/andikahilmy/CVE-2017-7559-undertow-vulnerable
Associated Vulnerability
Title:Red Hat Undertow 安全漏洞 (CVE-2017-7559)
Description:Red Hat Undertow是美国红帽（Red Hat）公司的一款基于Java的嵌入式Web服务器，是Wildfly（Java应用服务器）默认的Web服务器。 Red Hat Undertow中存在安全漏洞，该漏洞源于程序没有过滤查询字符串和路径参数中无效字符。攻击者可通过操作HTTP相响应利用该漏洞造成web缓存中毒，实施跨站脚本攻击，或获取其他用户请求中的敏感信息。以下版本受到影响：Undertow 2.0.0.Alpha2之前的2.x版本，1.4.17.Final之前的1.4.x版本，1.3.3
File Snapshot

 None
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.