CVE-2024-50379 PoC — Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

Source

https://github.com/gomtaengi/CVE-2024-50379-exp

Associated Vulnerability

Title:Apache Tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)
Description:Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.

Description

CVE-2024-50379-exp

Readme

# CVE-2024-50379-exp
-  -t 条件竞争时间
-  -u 域名
-  -f 写入木马

测试发现第一次条件竞争时有很大几率会写入失败需要重新再进行一次条件竞争才会写入木马，所以脚本第一次会进行固定6秒条件竞争检测是否写入，没有会再进行用户自定义或者默认的10秒检测，生成的木马为随机md5.jsp

```
python .\CVE-2024-50379.py -u http://192.168.31.33:8888/ -f '123456<%Runtime,getRuntime().exec("calc.exe");%>' -t 10
```

![image](https://github.com/user-attachments/assets/832947e2-3b36-47bb-a638-9427bc687437)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!