module
Jorani unauthenticated Remote Code Execution
| Disclosed |
|---|
| Jan 6, 2023 |
Disclosed
Jan 6, 2023
Description
This module exploits an unauthenticated Remote Code Execution in Jorani prior to 1.0.2.
It abuses 3 vulnerabilities: log poisoning and redirection bypass via header spoofing, then it uses path traversal to trigger the vulnerability.
It has been tested on Jorani 1.0.0.
It abuses 3 vulnerabilities: log poisoning and redirection bypass via header spoofing, then it uses path traversal to trigger the vulnerability.
It has been tested on Jorani 1.0.0.
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.