Add PoC exploit for CVE-2024-36401 - Githubissues

ronin-rb / community-pocs

A repository of PoCs for ronin-exploits

https://ronin-rb.dev

GNU General Public License v3.0

0 stars 2 forks source link

Add PoC exploit for CVE-2024-36401 #53

Open postmodern opened 3 months ago

postmodern commented 3 months ago

Add a PoC exploit for CVE-2024-36401, unauthenticated command execution in GeoServer < 2.23.6, < 2.24.4, < 2.25.2.

Reference PoCs

https://github.com/bigb0x/CVE-2024-36401/blob/main/cve-2024-36401.py
https://github.com/Niuwoo/CVE-2024-36401/blob/main/CVE-2024-36401.py
https://github.com/RevoltSecurities/CVE-2024-36401 (contains an exploit and docker-compose.yml file)
https://github.com/jakabakos/CVE-2024-36401-GeoServer-RCE/blob/master/detect.py

Vuln App

https://github.com/RevoltSecurities/CVE-2024-36401/blob/main/docker-compose.yaml

How to Submit a PoC

See the CONTRIBUTING file for instructions on how to submit a PoC exploit.