Exploit for Code Injection in Geoserver

githubexploit · 2024-10-05

Description

Geoserver code injection exploit for CVE-2024-36401 enabling command execution, reverse shell, and memory shell.

Affected software

Geoserver< 2.22.6, 2.23.6, 2.24.4, 2.25.2

Geotools< 29.6, 30.4, 31.2, 30.0, 31.0

All known vulnerabilities by product

CVSS 9.8 for CVE-2024-36401

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

97%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

99.8%higher than 100.0% of all CVEs

Updated 2026-08-19

Exploit Details

Modified:2025-08-27 02:21

Last Seen:2025-09-05 11:47

Reporter:netuseradministrator

Written in:Go

Last commit:2026-01-07

Tags

geoservercode injectionCVE-2024-36401command executionreverse shellmemory shelllow java version

Other exploits for CVE-2024-36401

GeoServerExploit

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

2026-08-29 KitPloitKITPLOIT

CVE-2024-36401_Geoserver_RCE_POC

2026-08-29 KitPloitKITPLOIT

cve-2024-36401-geoserver-rce

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2024-36401-poc

2026-08-28 KitPloitKITPLOIT

CVE-2024-36401-PoC

2026-08-28 KitPloitKITPLOIT

Exploit Code

README4 lines

## https://sploitus.com/exploit?id=2F8BD968-D8F2-505B-998D-26CB91310FBA
CVE-2024-36401 vulnerability graphical exploitation tool, features include command execution, reverse shell, and low-version JDK injection for memory exploits.

[source-iocs-preserved url=https://github.com/user-attachments/assets/5a01b480-7006-4474-bf56-6fcfcbc87aeb]