CVE-2020-7799 PoC — FusionAuth 注入漏洞

Source

https://github.com/Pikaqi/cve-2020-7799

Associated Vulnerability

Title: FusionAuth 注入漏洞 (CVE-2020-7799)
Description:An issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e-mail templates (Home -> Settings -> Email Templates) or themes (Home -> Settings -> Themes), can execute commands on the underlying operating system by abusing freemarker.template.utility.Execute in the Apache FreeMarker engine that processes custom templates.

Description

批量检测cve-2020-7799

Readme

# cve-2020-7799
## 批量检测cve-2020-7799

#### 在同目录下添加一个text.txt文件
#### 文件内url格式如下所示：
#### www.baidu.com
#### 132.231.132.132
#### 133.12.122.13:8080
#### 运行即可python3 cve-2020-7799.py
#### 注意：禁止使用本项目所有资源进行非法测试！

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →