CVE-2016-0710

This Metasploit module exploits CVE-2016-0710 in Apache Jetspeed by leveraging an unsecured REST API to create an admin user and a ZIP path traversal vulnerability to upload and execute a JSP shell.

This Metasploit module exploits CVE-2016-0710 in Apache Jetspeed by leveraging an unsecured User Manager REST API and a ZIP file path traversal to upload and execute a JSP shell. It creates an admin user, logs in, uploads a malicious ZIP file, and triggers the payload.