cve/2021/CVE-2021-23259.md

CVE-2021-23259

Description

Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remotely(RCE).

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Hax0rG1rl/my_cve_and_bounty_poc
• https://github.com/happyhacking-k/happyhacking-k
• https://github.com/happyhacking-k/my_cve_and_bounty_poc