Description
在启用了enableCmdLineArguments的Windows上运行时，Apache Tomcat 9.0.0.M1到9.0.17,8.5.0到8.5.39和7.0.0到7.0.93中的CGI Servlet很容易受到远程执行代码的影响JRE将命令行参数传递给Windows的方式。
Apache Tomcat CGIServlet远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2019-0232
https://www.cnblogs.com/liliyuanshangcao/p/10731966.html
https://zhuanlan.zhihu.com/p/66906576
https://blog.lyle.ac.cn/2019/04/20/cve-2019-0232/
https://blog.nsfocus.net/cve-2019-0232/
https://www.sqyysec.com/Apache-Tomcat-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%EF%BC%88CVE-2019-0232%EF%BC%89/
https://www.ksyun.com/cms/notice/104.html
https://avd.aliyun.com/detail?id=AVD-2019-0232
https://www.exploit-db.com/exploits/47073
https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/
https://github.com/jas502n/CVE-2019-0232
https://www.trendmicro.com/en_us/research/19/d/uncovering-cve-2019-0232-a-remote-code-execution-vulnerability-in-apache-tomcat.html