writeups.xyz / Bypassing OGNL sandboxes for fun and charities

Submitter : c2a

Date: 27 January 2023

Bounty : undisclosed

Vulnerabilities :

• OGNL Injection

Programs :

• Atlassian
• Apache Struts

Authors :

• Alvaro Muñoz (@Pwntester)

Link :
https://github.blog/2023-01-27-bypassing-ognl-sandboxes-for-fun-and-charities/