GigaSpaces XAP unauth path traversal JSP RCE

Benign upload then clientId traversal writes shell.jsp to gs-webui webapp root; GET /shell.jsp?cmd= executes commands. """GigaSpaces XAP unauthenticated fileUpload traversal JSP RCE.""" from future import annotations import uuid from urllib.parse import quote from kittysploit import from...