cve/2015/CVE-2015-6576.md

CVE-2015-6576

Description

Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.

POC

Reference

• http://packetstormsecurity.com/files/134065/Bamboo-Java-Code-Execution.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/AdeliaNitzsche/Java-Deserialization-Cheat-Sheet
• https://github.com/BrittanyKuhn/javascript-tutorial
• https://github.com/CallMeJonas/CVE-2015-6576
• https://github.com/EdoardoVignati/java-deserialization-of-untrusted-data-poc
• https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
• https://github.com/PalindromeLabs/Java-Deserialization-CVEs
• https://github.com/klausware/Java-Deserialization-Cheat-Sheet
• https://github.com/mishmashclone/GrrrDog-Java-Deserialization-Cheat-Sheet