Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit
This is a dockerized application that is vulnerable to the Spring4Shell vulnerability (CVE-2022-22965). Full Java source for the war is provided and modifiable, the war will get re-built whenever the docker image is built. The built WAR will then be loaded by Tomcat. There is nothing special about this application, it’s a simple hello world that’s based off Spring tutorials. Details: https://www.lunasec.io/docs/blog/spring-rce-vulnerabilities Requirements Docker Python3 + requests library Instructions Clone the repository Build and run the container: docker build . […]
Read more