## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-OSCERD-CVE-2024-22369
# CVE-2024-22369
### Credits
This POC is based on the reproducer built by Ziyang Chen of HuaWei Open Source Management Center
The reproducer has been used to create this PoC, with some adjustments and clean up, and also enriched with some more automation.
### Prepare the enviroment
We'll need a Mysql instance
`docker run --name some-mysql -p 3306:3306 -e MYSQL_ROOT_PASSWORD=my-secret-pw -e MYSQL_DATABASE=db -d mysql`
Now we'll need to create the required tables:
You have two files: employee.sql and employee_completed.sql
Run the following command:
`docker run -it --rm mysql mysql -h 172.17.0.2 -uroot -p`
Insert your password, execute `USE db` and run the two SQL files.
At this stage you already have the required bits to reproduce the deserialization.
Run the following command
`docker inspect -f '{{range.NetworkSettings.Networks}}{{.IPAddress}}{{end}}' some-mysql`