rusakovichma/tomcat-embed-core-9.0.31-CVE-2020-11996

PoC

tomcat-embed-core-9.0.31 CVE-2020-11996 Test PoC

view exploit source poc_in_githubauthor rusakovichmapublished 2020-07-27catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-11996US	high7.5	26.7% (98th)	Exploit	2020-06-26
A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several second…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.