Description
Apache JXPath 在解析用户提供的XPath表达式时，若使用了JXPathContext中除compile和compilePath之外的函数来解析XPath表达式时，会导致远程代码执行漏洞。
Apache Commons JXPath 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.anquanke.com/post/id/281941
https://avd.aliyun.com/detail?id=AVD-2022-41852
https://github.com/apache/incubator-seata/issues/6010
https://www.huidusec.com/about_news_detail31.html
https://netc.shcmusic.edu.cn/2022/1010/c1811a45063/pagem.htm
https://y4tacker.github.io/2022/10/13/year/2022/10/%E6%B5%85%E6%9E%90Apache-Commons-Jxpath%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E5%88%86%E6%9E%90-CVE-2022-41852/
https://zhuanlan.zhihu.com/p/571482239
https://www.huaweicloud.com/notice/2022/20221012161751257.html
https://www.oscs1024.com/blog/2022/10/09/cve-2022-41852/
https://blog.csdn.net/LJQClqjc/article/details/127207906
https://hackinglab.cz/en/blog/remote-code-execution-in-jxpath-library-cve-2022-41852/
https://issues.apache.org/jira/browse/JXPATH-201