writeups.xyz / DataBinding2Shell: Novel Pathways to RCE Web Frameworks

Submitter : c2a

Date: 7 December 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Spring4Shell

Programs :

• Spring
• Grails

Authors :

• Haowen Mu (@Meizjm3i)
• Biao He (@Codeplutos)

Link :
https://www.blackhat.com/eu-22/briefings/schedule/#databindingshell-novel-pathways-to-rce-web-frameworks-28583