Hacker News new | ask | show | jobs
by vips7L 1538 days ago
That’s not really a POC though. That’s not a Spring Application I can run and reproduce on. That’s just a py script.
2 comments
growse 1538 days ago
The PDF in the repo contains a simple Java sample that should be straightforward to build and run.
link
vips7L 1538 days ago
Yeah it doesn't work with a default Spring MVC project from start.spring.io on Jdk 18. It's hardly a proof of concept without any configuration details of the spring project. Security researchers need to do better than this.
link
freeqaz 1537 days ago
Check the post again. We made a repo with a full end to end vulnerable app and POC
link