CVE-2022-24816 PoC — Improper Control of Generation of Code in jai-ext

Source

https://github.com/c1ph3rbyt3/CVE-2022-24816

Associated Vulnerability

Title:Improper Control of Generation of Code in jai-ext (CVE-2022-24816)
Description:JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and executed. In particular, this affects the downstream GeoServer project. Version 1.2.22 will contain a patch that disables the ability to inject malicious code into the resulting script. Users unable to upgrade may negate the ability to compile Jiffle scripts from the final application, by removing janino-x.y.z.jar from the classpath.

Readme


# Uso del script CVE-2022-24816

## Requisitos previos

1. **Clonar el repositorio**:
   ```bash
   git clone https://github.com/c1ph3rbyt3/CVE-2022-24816.git
   cd CVE-2022-24816
   ```

2. **Instalar las dependencias**:
   Asegúrate de tener Python 3 instalado. Luego, instala las dependencias necesarias ejecutando:
   ```bash
   pip install -r requirements.txt
   ```

   El archivo `requirements.txt` incluye las siguientes librerías:
   - `requests`
   - `urllib3`
   - `colorama`

---

## Cómo usar el script

### Opciones disponibles

- `-u` o `--url`: Especifica la URL objetivo del servidor GeoServer vulnerable. Ejemplo: `http://example.com` o `https://example.com`.
- `-c` o `--command`: Especifica el comando que se ejecutará en el sistema objetivo.

### Ejemplo de ejecución

1. Ejecutar el script con un comando específico:
   ```bash
   python CVE-2022-24816.py -u https://vulnerable-geoserver.com -c "whoami"
   ```

   Esto enviará la carga maliciosa al servidor objetivo y mostrará la salida del comando en pantalla.

---

## Notas adicionales

- La salida del comando será procesada y mostrada directamente en la consola.
- Si el servidor no es vulnerable, se recibirá un mensaje indicando que la explotación falló.

---

## Contacto

Creado por: **C1ph3rByt3**

File Snapshot


 [4.0K]  /data/pocs/efe43eb61177d44619ca3544d5d9edc363b2090d
├── [5.5K]  CVE-2022-24816.py
├── [1.1K]  LICENSE
├── [1.3K]  README.md
└── [  25]  requirements.txt

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!