CVE-2022-22916

This repository provides a proof-of-concept for CVE-2022-22916, an RCE vulnerability in O2OA v6.4.7. The exploit involves authenticating as 'xadmin/o2', then creating and executing a malicious interface via the '/x_program_center/jaxrs/invoke' endpoint to achieve remote code execution.

The repository provides a detailed technical writeup for CVE-2022-22916, an RCE vulnerability in O2OA v6.4.7. It includes step-by-step instructions, HTTP request templates, and payload examples for exploiting the vulnerability via the `/x_program_center/jaxrs/invoke` endpoint.