GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Kevin Beaumont (gossithedog@cyberplace.social)'s status on Monday, 23-Dec-2024 23:35:58 JSTKevin BeaumontKevin Beaumont
    in reply to

    yip. similar to the CVE this time last year, I've not seen or heard of an actual incident resulting from the vuln.
    https://infosec.exchange/@todb/113702464854067173

    In conversationabout 3 months ago from cyberplace.socialpermalink

    Attachments

    1. No result found on File_thumbnail lookup.
      Tod Beardsley :thinkerguns: (@todb@infosec.exchange)
      from Tod Beardsley :thinkerguns:
      Near as I can tell, the activity around the #Struts2 bug, CVE-2024-53677, is just ham-handed runs of some generalized PoC, and nobody's actually exploiting this yet (since exploitation would be very application/path specific). Most of the news last week was all "exploitation happening, patch and rewrite everything now!" but not seeing any reports of successful (or even possibly successful) this morning. Tell me I'm wrong! (The PoC identified by SANS at https://isc.sans.edu/diary/31520 isn't specific to some particular application -- it's on the user to define `upload_endpoint` and assumes no auth or session or anything.)
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.