CVE-2022-29464 PoC — WSO2 API Manager 路径遍历漏洞

Source

https://github.com/ThatNotEasy/CVE-2022-29464

Associated Vulnerability

Title:WSO2 API Manager 路径遍历漏洞 (CVE-2022-29464)
Description:Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a ../../../../repository/deployment/server/webapps directory. This affects WSO2 API Manager 2.2.0 up to 4.0.0, WSO2 Identity Server 5.2.0 up to 5.11.0, WSO2 Identity Server Analytics 5.4.0, 5.4.1, 5.5.0 and 5.6.0, WSO2 Identity Server as Key Manager 5.3.0 up to 5.11.0, WSO2 Enterprise Integrator 6.2.0 up to 6.6.0, WSO2 Open Banking AM 1.4.0 up to 2.0.0 and WSO2 Open Banking KM 1.4.0, up to 2.0.0.

Description

Perform With Mass Exploits In WSO Management.

Readme

## CVE-2022-29464
- CVE-2022-29464 is a critical vulnerability in WSO2 Identity Server, an open-source identity and access management platform. The vulnerability allows remote attackers to upload malicious JSP files that can execute arbitrary commands on the target system with administrative privileges. The vulnerability is a file upload function issue that is exploited by bypassing the file extension validation mechanism. The vulnerability was assigned a CVSS score of 9.8, indicating its severity.
## Example Dorks
```
title:"WSO2 Carbon Server"
```
## Screenshot
![Screenshot_3](https://user-images.githubusercontent.com/25004320/234240252-25e4baba-b299-4775-a909-7b6e4cafeb18.png)
![Screenshot_4](https://user-images.githubusercontent.com/25004320/234240331-42e1852b-7582-4dd0-b781-5ef0a6fc2902.png)
## Requirements
- Python3.7+
## Supported Os
- Linuxer
- Wingays
## Get start with
```
$ git clone https://github.com/Pari-Malam/CVE-2022-29464
$ cd CVE-2022-29464
$ pip/pip3 install -r requirements.txt
$ python/python3 wso.py
```
## Footprints Notes
- By using this tool, you agree that you are using it for educational purposes only and that you will not use it for any illegal activity. You also agree to bear all risks associated with the use of this tool. I will not be responsible for direct or indirect damage caused by the use of this tool. Don't suyyyyyyyyyyyyyyyyyyyy me!
## Author
- Pari Malam
## Contacts
[![Telegram](https://img.shields.io/badge/-Telegram-blue)](https://telegram.me/SurpriseMTFK)
[![Discord](https://img.shields.io/badge/-Discord-purple)](https://discordapp.com/users/829404192585678858)

File Snapshot


 [4.0K]  /data/pocs/9ab1908120d54b7f91955fcbd804c6876f08fe95
├── [4.0K]  Files
│   └── [ 71K]  shell.jsp
├── [1.6K]  README.md
├── [  25]  requirements.txt
└── [7.3K]  wso.py

1 directory, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!