yarocher/lazylist-cve-poc

PoC

POC for the CVE-2022-36944 vulnerability exploit

view exploit source poc_in_githubauthor yarocherpublished 2023-05-16catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-36944US	critical9.8	11.0% (96th)	Exploit	2022-09-23
Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. On its own, it cannot be exploited. There is only a risk in conjunction with Java object deserializatio…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.