CVE-2017-8046 PoC — Pivotal Spring Data REST、Spring Boot和Spring Data 安全漏洞

Source

https://github.com/jkutner/spring-break-cve-2017-8046

Associated Vulnerability

Title: Pivotal Spring Data REST、Spring Boot和Spring Data 安全漏洞 (CVE-2017-8046)
Description:Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.

Description

This is a Java program that exploits Spring Break vulnerability (CVE-2017-8046).

Readme

# CVE-2017-8046 (Spring Break)

This is a Java program that exploits Spring Break vulnerability (CVE-2017-8046).

## Disclaimer

**This tool is intended for security engineers and appsec guys for security assessments. Please use this tool responsibly. I do not take responsibility for the way in which any one uses this application. I am NOT responsible for any damages caused or any crimes committed by using this tool.**

## Usage

```
$ ./mvnw clean install
$ java -jar target/spring-break.jar
```

## Links

* https://github.com/m3ssap0/spring-break_cve-2017-8046
* https://pivotal.io/security/cve-2017-8046
* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8046
* https://nvd.nist.gov/vuln/detail/CVE-2017-8046

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →