OSGeo GeoServer GeoTools Eval Injection Vulnerability
CVSS score
—
EPSS probability
%99.8
Risk score
—
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: GeoServer RCE in Evaluating Property Name Expressions
本脚本是针对 GeoServer 的远程代码执行漏洞（CVE-2024-36401）开发的 PoC（Proof of Concept）探测工具。该漏洞允许攻击者通过构造特定请求，在目标服务器上执行任意命令。
Python exploit for GeoServer (CVE-2024-36401) with JSP web shell upload
CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现
DanieleGiovanardi2408/cve-2024-36401-geoserver-rce
Remix of Chokapikk's CVE-2024-36401 to allow webshell-like behaviour on limited environments
raniaemran/cve-2024-36401-security-simulator
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-36401"