(CVE-2024-3653) Undertow learning-push 配置不当漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-3653
• https://bugzilla.redhat.com/show_bug.cgi?id=2274437
• https://github.com/advisories/GHSA-ch7q-gpff-h9hp
• https://www.cvedetails.com/cve/CVE-2024-3653/
• https://www.cve.org/CVERecord?id=CVE-2024-3653
• https://security.netapp.com/advisory/ntap-20240828-0002/

Related Vulnerabilities

• PoCCVE-2021-3239: E-Learning System 1.0 - SQL Injection
• PoCunauth-mulesoft-dataweave: MuleSoft DataWeave Interactive Learning Environment - Unauthenticated Access
• E-Learning存在SQL注入漏洞(CVE-2021-3239)
• PoCCVE-2022-38553: Academy Learning Management System <5.9.1 - Cross-Site Scripting
• PoCCVE-2022-45917: ILIAS eLearning <7.16 - Open Redirect
• PoCCVE-2021-3239: E-Learning System v1.0 SQL注入基于时间盲注漏洞
• PoCe-learning-system-authentication-bypass-rce: E-Learning System 1.0 - Authentication Bypass
• SourceCodester E-Learning System 代码注入漏洞
• 深圳新为SmartLearning前台任意文件上传漏洞
• GUnet OpenEclass E-learning platform CVE-2024-31777 命令注入漏洞
• Academy Learning Management System 跨站脚本漏洞
• 时代光华 e-learning 远程代码执行漏洞
• Red Hat Undertow 安全漏洞