writeups.xyz / Apache SCXML Remote Code Execution

Submitter : c2a

Date: 6 February 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Security Code Review

Programs :

• Apache SCXML

Authors :

• Pyn3rd (@Pyn3rd)

Link :
https://pyn3rd.github.io/2023/02/06/Apache-Commons-SCXML-Remote-Code-Execution/