Exploit for Improper Input Validation in Apache Unomi

githubexploit · 2021-09-05

Description

Exploit for Injection in Apache Unomi CVE-2020-13942. Use httpx or httprob on targets before running the script. Credit to Rohit Gautam

Affected Apache Unomi versions

Apache Unomi< 1.5.2

All known vulnerabilities by product

CVSS 9.8 for CVE-2020-13942

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

99%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

68.4%higher than 99.2% of all CVEs

Updated 2026-06-20

Exploit Details

Modified:2021-09-05 16:39

Last Seen:2025-08-31 20:52

Reporter:Prodrious

Written in:Shell

Last commit:2021-09-05

Tags

apache unomiinjectionCVE-2020-13942httpxhttprobrohit gautam

Other exploits for CVE-2020-13942

Exploit for Authentication Bypass Using an Alternate Path or Channel in Solarwinds Orion_Platform

2021-10-20 ChurquleGITEE

Exploit for Improper Input Validation in Apache Unomi

2021-01-24 NULLGITEE

Exploit for Improper Input Validation in Apache Unomi

2021-01-11 hoanx4GITHUB

Exploit for CVE-2020-11975

2020-11-24 1135GITHUB

Exploit for Improper Input Validation in Apache Unomi

2020-11-21 blackmarketerGITHUB

Exploit for Improper Input Validation in Apache Unomi

2020-11-20 shifa123GITHUB

Exploit for Improper Input Validation in Apache Unomi

2020-11-19 eugenebmxGITHUB

Exploit Code

README12 lines

## https://sploitus.com/exploit?id=B1AAB2CE-1581-5522-B41C-E433DF2138D6
# CVE-2020-13942

 * Run httpx or httprob on the targets before using the script.

# USAGE 
 
 * ./CVE-2020-13942.sh target.txt
 
 # Credit
 
  * This script was made from [Rohit Gautam](https://github.com/shifa123/CVE-2020-13942-POC-) Repo