Sploitus

Exploit for CVE-2023-21939

githubexploit · 2023-08-26

Exploit Code

README55 lines
## https://sploitus.com/exploit?id=EEAA436E-2A0E-5C21-9B69-3E885475185C
## JDK CVE-2023-21939

[文章链接](https://mp.weixin.qq.com/s?__biz=MzkzOTQzOTE1NQ==&mid=2247483750&idx=1&sn=12a793075d0a8713bbfb4341b3591628&chksm=c2f1a43af5862d2cc898be9e4b43b24d24b29173501d3c10d812a8fcb7dd25d858e3095969ea#rd)

This is JDK CVE-2023-21939

Use JDK version lower than 8u371

### JDK + Apache XML Graphics

```xml

    org.apache.xmlgraphics
    batik-swing
    1.15

```

How to reproduce this RCE:

(1) Run XmlServer.java 

(2) Run JarServer.java

(3) Run JarRCE.java for Test and successfully RCE

Screenshot:

![](imgs/001.png)

### JDK + Apache XML Graphics + Mozilla Rhino

```xml

    org.apache.xmlgraphics
    batik-swing
    1.15


    org.mozilla
    rhino
    1.7.10

```

How to reproduce this RCE:

(1) Run XmlServer.java

(2) Run JSRCE.java for Test and successfully RCE

Screenshot:

![](imgs/002.png)