CVE-2017-11467

This exploit leverages a privilege escalation vulnerability in OrientDB (CVE-2017-11467) where unprivileged users can bypass RBAC restrictions to execute arbitrary Groovy code, leading to remote command execution. The PoC automates privilege escalation and deploys a reverse shell via a crafted Groovy function.

This Metasploit module exploits a privilege escalation vulnerability in OrientDB 2.2.x to execute unsandboxed OS commands via a crafted Groovy function. It leverages HTTP Basic Auth to create and trigger a malicious function, then cleans up by deleting it.