Description
Bonita Web存在远程代码执行漏洞，此漏洞是缺乏校验导致的。
Bonita Web CVE-2022-25237远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-25237
https://rhinosecuritylabs.com/application-security/cve-2022-25237-bonitasoft-authorization-bypass/
https://avd.aliyun.com/detail?id=AVD-2022-25237
https://www.invicti.com/web-application-vulnerabilities/bonita-authorization-bypass-cve-2022-25237
https://github.com/RhinoSecurityLabs/CVEs/blob/master/CVE-2022-25237/CVE-2022-25237.py
https://zhuanlan.zhihu.com/p/573110089
https://www.anquanke.com/post/id/281732
https://www.cnblogs.com/hetianlab/p/17040748.html
https://blog.51cto.com/u_14601424/6345696
https://cn-sec.com/archives/1376809.html
https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2022-0432.html/