CVE-2010-1622 PoC — Spring Framework 代码注入漏洞

Source

https://github.com/E-bounce/cve-2010-1622_learning_environment

Associated Vulnerability

Title: Spring Framework 代码注入漏洞 (CVE-2010-1622)
Description:SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.

Description

cve-2010-1622 Learning Environment

Readme

# cve-2010-1622_learning_environment
- tomcat 6.0.26
- Jdk1.8.45
This Project Include simple SpringMvc source code and a Dockerfile you can use to build the environment.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →