NOMISEC-humbss/CVE-2022-42889

NOMISEC WORKING POC
Exploit for CVE-2022-42889 - Apache Commons Text < 1.10.0 - Code Injection
AI Analysis

This repository contains a functional PoC for CVE-2022-42889, exploiting a remote code execution vulnerability in Apache Commons Text versions prior to 1.10. The PoC uses a crafted string with a malicious script expression to trigger a reverse shell via netcat.

Attack Type
RCE
Complexity
trivial
Reliability
reliable
MITRE ATT&CK
T1059 - Command and Scripting Interpreter T1189 - Drive-by Compromise
Loading exploit code...
Download ZIP Password: eip
Source
Platform Nomisec
Type poc
Files 7
Stars 2
Forks 0
Last Push Oct 21, 2022
Authors
humbss
Vulnerability
CVE-2022-42889
Apache Commons Text < 1.10.0 - Code Injection
CRITICAL
CVSS 9.8