CyberCTF/vulhub-spring-cve-2016-4977

PoC

Vulhub spring/CVE-2016-4977: Spring Security OAuth2 Whitelabel SpEL RCE (CVE-2016-4977), run with Isoloom

view exploit source poc_in_githubauthor CyberCTFpublished 2026-10-08catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-4977US	high8.8	79.2% (100th)	Exploit	2017-05-25
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spri…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.