Arbitrary Code Execution Through Uploading a Malicious JSP File – Vulnerability Analysis
MIKOŁAJ PUDLICKI
During security tests, a critical vulnerability was discovered in the tested application. This issue allows an attacker to execute any code on the server by uploading a malicious JSP file. The problem arises from a lack of proper validation of uploaded files, which can be exploited by attackers.
READ article
