exploit/linux/http/h2_webinterface_rce

weaponized

H2 Web Interface Create Alias RCE

view exploit source metasploittype exploitpublished 2018-04-09catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-10054US	high8.8	33.7% (98th)	Exploit	2018-04-11
H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code. NOTE: the vendor's position is…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.