CVE-2013-2186
Redhat Jboss Enterprise Brms Platform - Improper Input Validation
Title source: ruleExploitation Summary
EIP tracks 5 public exploits for CVE-2013-2186. PoCs published by GrrrDog, dawetmaster, andikahilmy.
AI-analyzed exploit summary This repository contains a payload generator for exploiting CVE-2013-2186, a Java deserialization vulnerability in Apache Commons FileUpload <= 1.3. It allows arbitrary file uploads by manipulating serialized objects.
Description
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.
Exploits (5)
This repository contains a payload generator for exploiting CVE-2013-2186, a Java deserialization vulnerability in Apache Commons FileUpload <= 1.3. It allows arbitrary file uploads by manipulating serialized objects.
This repository contains the vulnerable source code of Apache Commons FileUpload (pre-patch) for CVE-2013-2186, which is a denial-of-service (DoS) vulnerability caused by inefficient handling of multipart form data. The code includes deprecated classes like `DefaultFileItem` and `DefaultFileItemFactory`, which are part of the vulnerable implementation.
This repository contains the vulnerable source code of Apache Commons FileUpload (pre-patch) for CVE-2013-2186, which is a denial-of-service (DoS) vulnerability. The code includes deprecated classes like DefaultFileItem and DefaultFileItemFactory, which are part of the vulnerable implementation.
This repository contains a proof-of-concept for CVE-2013-2186, demonstrating a Java deserialization vulnerability in Apache Commons FileUpload. The code includes a servlet that handles file uploads and deserializes user data, which can be exploited for remote code execution.
This repository contains a Java-based payload generator for CVE-2013-2186, which exploits a deserialization vulnerability in Apache Commons FileUpload. The PoC creates a malicious serialized object that can write arbitrary files to the target system when deserialized.