Home / os / winnt

Apache OFBiz XML-RPC Java Deserialization

Posted on 17 August 2020

This Metasploit module exploits a Java deserialization vulnerability in Apache OFBiz's unauthenticated XML-RPC endpoint /webtools/control/xmlrpc for versions prior to 17.12.04.

 

TOP