CVE-2022-22954 PoC — VMware 多款产品代码注入漏洞

Source

https://github.com/jax7sec/CVE-2022-22954

Associated Vulnerability

Title:VMware 多款产品代码注入漏洞 (CVE-2022-22954)
Description:VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

Description

提供批量扫描URL以及执行命令功能。Workspace ONE Access 模板注入漏洞，可执行任意代码

Readme

# CVE-2022-22954
## 漏洞描述
  Workspace ONE Access 提供统一应用门户,通过门户可安全访问企业的所有应用，可用于单点登录。CVE-2022-22954 中，攻击者可构造恶意请求造成模板注入，执行任意代码，控制服务器。
## 参考文章
  https://www.tenable.com/blog/vmware-patches-multiple-vulnerabilities-in-workspace-one-vmsa-2022-0011

# 使用说明
## 批量扫描模式
```
python3 CVE-2022-22954.py -m scan -f 123.txt
```
![scan_mode](scan_mode.png)

## 命令执行模式
```
python3 CVE-2022-22954.py -u https://xxx.xxx.com:8443 -c id
```
![rce_mode](rce_mode.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!