what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Thaddeus Bogner

Atlassian Crowd XML Entity Expansion Remote File Access

Posted Sep 1, 2024

Authored by juan vazquez, Will Caput, Trevor Hartman, Thaddeus Bogner | Site metasploit.com

This Metasploit module simply attempts to read a remote file from the server using a vulnerability in the way Atlassian Crowd handles XML files. The vulnerability occurs while trying to expand external entities with the SYSTEM identifier. This Metasploit module has been tested successfully on Linux and Windows installations of Crowd.

tags | exploit, remote

systems | linux, windows

advisories | CVE-2012-2926

SHA-256 | 75935ac70e77d2ed62ac0e96af0d4e5b93fa4b3bb3efd5ddaf65a718cf03dd38

Download | Favorite | View