Description
Apache Commons JXPath库存在远程代码执行漏洞。
Apache Commons JXPath CVE-2022-41852 代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.anquanke.com/post/id/281941
https://avd.aliyun.com/detail?id=AVD-2022-41852
https://www.huaweicloud.com/notice/2022/20221012161751257.html
https://www.oscs1024.com/blog/2022/10/09/cve-2022-41852/
https://www.huidusec.com/about_news_detail31.html
https://github.com/apache/incubator-seata/issues/6010
https://y4tacker.github.io/2022/10/13/year/2022/10/%E6%B5%85%E6%9E%90Apache-Commons-Jxpath%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E5%88%86%E6%9E%90-CVE-2022-41852/
https://netc.shcmusic.edu.cn/2022/1010/c1811a45063/pagem.htm
https://nvd.nist.gov/vuln/detail/cve-2022-41852
https://issues.apache.org/jira/browse/JXPATH-201
https://hackinglab.cz/en/blog/remote-code-execution-in-jxpath-library-cve-2022-41852/
https://www.miggo.io/vulnerability-database/cve/CVE-2022-41852
https://www.suse.com/security/cve/CVE-2022-41852.html