Description
Spring Security OAuth SpEL注入漏洞(CVE-2016-4977)
Spring Security OAuth SpEL注入漏洞(CVE-2016-4977)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2016-4977
https://spring.io/security/cve-2016-4977
https://github.com/vulhub/vulhub/blob/master/spring/CVE-2016-4977/README.md
https://www.cnblogs.com/litlife/p/10380701.html
https://blog.csdn.net/qq_54713392/article/details/116520223
https://zgao.top/spring-security-oauth2cve-2016-4977%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://docs.ioin.in/writeup/www.mottoin.com/_90527_html/index.html
https://cloud.tencent.cn/developer/article/1078439
https://avd.aliyun.com/detail?id=AVD-2016-4977