writeups.xyz / CVE-2022-22241: Juniper SSLVPN / JunOS RCE and Multiple Vulnerabilities

Submitter : c2a

Date: 28 October 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Phar Deserialization
• Reflected XSS
• XPATH Injection
• Path Traversal
• LFI

Programs :

• Juniper

Authors :

• Paulos Yibelo (@PaulosYibelo)

Link :
https://octagon.net/blog/2022/10/28/juniper-sslvpn-junos-rce-and-multiple-vulnerabilities/