CVE-2013-4212
Apache Roller < 5.0.2 - Remote Code Execution via OGNL Injection in getText Methods
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-4212.
PoCs published by Metasploit, Unknown, juan vazquez, including Metasploit module exploits/multi/http/apache_roller_ognl_injection.
AI-analyzed exploit summary This Metasploit module exploits an OGNL injection vulnerability in Apache Roller < 5.0.2 via the UIAction controller, allowing remote code execution by injecting malicious OGNL expressions through the 'pageTitle' parameter.
Description
Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka "OGNL Injection."
Exploits (2)
This Metasploit module exploits an OGNL injection vulnerability in Apache Roller < 5.0.2 via the UIAction controller, allowing remote code execution by injecting malicious OGNL expressions through the 'pageTitle' parameter.
This Metasploit module exploits an OGNL injection vulnerability in Apache Roller < 5.0.2 via insecure usage of the ActionSupport.getText method, allowing remote code execution by uploading and executing a malicious JAR payload.