CVE-2020-11975
CRITICAL EXPLOITED NUCLEIApache Unomi < 1.5.1 and 1.5.2-1.5.3 - Remote Code Execution via OGNL Scripting
Title source: llmExploitation Summary
CVE-2020-11975 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including 1135. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains proof-of-concept exploits for CVE-2020-11975 and CVE-2020-13942, targeting Apache Unomi. The exploits leverage OGNL and MVEL injection to achieve remote code execution (RCE) by manipulating the 'propertyName' and 'parameterValues' fields in HTTP POST requests to the '/context.json' endpoint.
Description
Apache Unomi allows conditions to use OGNL scripting which offers the possibility to call static Java classes from the JDK that could execute code with the permission level of the running Java process.
Exploits (1)
This repository contains proof-of-concept exploits for CVE-2020-11975 and CVE-2020-13942, targeting Apache Unomi. The exploits leverage OGNL and MVEL injection to achieve remote code execution (RCE) by manipulating the 'propertyName' and 'parameterValues' fields in HTTP POST requests to the '/context.json' endpoint.
Nuclei Templates (1)
http.title:"Apache Unomi"
title="Apache Unomi"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H