CVE-2013-7285
CRITICAL NUCLEIOracle Endeca Information Discovery Studio - Remote Code Execution via XStream Input Stream Manipulation
Title source: manualExploitation Summary
EIP tracks 2 public exploits for CVE-2013-7285. PoCs published by Brian D. Hysell, shoucheng3. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages CVE-2013-7285 in OpenMRS Reporting Module 0.9.7, where untrusted XML input is passed to a vulnerable XStream library, enabling unauthenticated remote code execution via a crafted GET request. The PoC demonstrates command execution (e.g., calc.exe) by exploiting a hardcoded UUID from the Appointment Scheduling UI module.
Description
Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.
Exploits (2)
This exploit leverages CVE-2013-7285 in OpenMRS Reporting Module 0.9.7, where untrusted XML input is passed to a vulnerable XStream library, enabling unauthenticated remote code execution via a crafted GET request. The PoC demonstrates command execution (e.g., calc.exe) by exploiting a hardcoded UUID from the Appointment Scheduling UI module.
The repository contains benchmarking code for XStream but lacks any exploit PoC for CVE-2013-7285. No offensive techniques or vulnerability demonstrations are present.
Nuclei Templates (1)
References (9)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H