https://github.com/apache/xmlgraphics-batik
- Modify the line 11 in src/main/java/com.poc.Poc.java to change the command.
- Run
mvn clean package
- Exploit can be found in target/
Then you need to navigate to the Poc/ to use this exploit jar.
- SSRF
- RCE via jar
- RCE via ecmascript