writeups.xyz / JNDI Injection Remote Code Execution via Path Manipulation in MemoryUserDatabaseFactory

Submitter : c2a

Date: 21 July 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• JNDI Injection
• Security Code Review

Programs :

• Undisclosed

Authors :

• Steven Seeley (@Steventseeley)

Link :
https://srcincite.io/blog/2024/07/21/jndi-injection-rce-via-path-manipulation-in-memoryuserdatabasefactory.html