CVE-2024-37084-Poc

CVE-2024-37084-Poc Setup ,Analysis , Demo exploit and poc about CVE-2024-37084 How to use : py .\CVE-2024-37084-Poc.py usage: python CVE-2024-37084-Poc.py --targeturl --version --payloadurl --listenip --listenport PoC for CVE-2024-37084 - Remote Code Execution optional arguments: -h, --help show...

Exploit for Code Injection in Vmware Spring_Cloud_Data_Flow

Use dnslog to detect whether CVE-2024-37084 vulnerability exi...

Exploit for Code Injection in Vmware Spring_Cloud_Data_Flow

Detect vulnerabilities First, Use dnslog to detect whether CV...

Exploit for Code Injection in Vmware Spring_Cloud_Data_Flow

CVE-2024-37084-Poc Setup ,Analysis , Demo exploit and poc abou...

CVE-2024-37084

creationtimestamp| type| source ---|---|--- 2024-07-25 12:43:59+00:00| seen| https://t.me/cvedetector/1622 2024-07-25 18:59:12+00:00| published-proof-of-concept| https://t.me/HackingInsights/7457 2024-09-03 22:47:28+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/9087 2024-09-0...

org.springframework.cloud:spring-cloud-dataflow-docs (>=1.3.1.release, <=1.4.1.release), org.springframework.cloud:spring-cloud-dataflow-rest-client (>=1.3.1.release, <=1.4.1.release) +21 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.1.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-docs...

org.springframework.cloud:spring-cloud-dataflow-classic-docs (1.7.4.release), org.springframework.cloud:spring-cloud-dataflow-docs (1.7.4.release) +24 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.1.4.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-classic-doc...

org.springframework.cloud.stream.app:spring-cloud-starter-stream-sink-task-launcher-dataflow (1.0.0.release), org.springframework.cloud.stream.app:spring-cloud-stream-app-starters-docs (>=einstein.release, <=einstein.sr2) +31 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.1.0.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: -...

org.springframework.cloud:spring-cloud-dataflow-classic-docs (>=1.6.1.release, <=1.6.3.release), org.springframework.cloud:spring-cloud-dataflow-docs (>=1.6.1.release, <=1.6.3.release) +24 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.9.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-classic-doc...

com.backbase.oss:scdf-maven-plugin (0.2.0), org.springframework.cloud.stream.app:spring-cloud-starter-stream-sink-task-launcher-dataflow (>=1.0.1.release, <=1.1.4.release) +39 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (>=2.0.0.release, <=2.11.3)

org.springframework.cloud:spring-cloud-skipper MAVEN version =2.0.0.release, =1.0.1.release, =einstein.sr3, =1.0.1.release, =1.0.1.release, =2.1.0.release, =2.1.0.release, =elston.release, =2.11.0, =2.0.0.release, =2.0.0.release, =2.0.0.release, =2.11.3 -...

org.springframework.cloud:spring-cloud-dataflow-classic-docs (1.6.0.release), org.springframework.cloud:spring-cloud-dataflow-docs (1.6.0.release) +24 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.8.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-classic-doc...

org.springframework.cloud:spring-cloud-dataflow-docs (>=1.5.1.release, <=1.5.2.release), org.springframework.cloud:spring-cloud-dataflow-rest-client (>=1.5.1.release, <=1.5.2.release) +23 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.0.5.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-docs...

org.springframework.cloud:spring-cloud-skipper-autoconfigure (1.1.3.release), org.springframework.cloud:spring-cloud-skipper-client (1.1.3.release) +8 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.1.3.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.1.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-skipper-autoconfigur...

org.springframework.cloud:spring-cloud-dataflow-classic-docs (>=1.7.2.release, <=1.7.3.release), org.springframework.cloud:spring-cloud-dataflow-docs (>=1.7.2.release, <=1.7.3.release) +24 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (1.1.2.release)

org.springframework.cloud:spring-cloud-skipper MAVEN version 1.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-skipper and may be impacted: - org.springframework.cloud:spring-cloud-dataflow-classic-doc...

CVE-2024-37084 CVE-2024-37084: Remote code execution in Spring Cloud Data Flow

In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper server api can use a crafted upload request to write an arbitrary file to any location on the file system which could lead to compromising the server...

com.backbase.oss:scdf-maven-plugin (0.2.0), org.springframework.cloud.stream.app:spring-cloud-starter-stream-sink-task-launcher-dataflow (>=1.0.0.release, <=1.1.4.release) +48 more potentially affected by CVE-2024-37084 via org.springframework.cloud:spring-cloud-skipper (>=1.0.0.release, <=2.11.3)

org.springframework.cloud:spring-cloud-skipper MAVEN version =1.0.0.release, =1.0.0.release, =einstein.release, =1.0.0.release, =1.0.0.release, =1.1.1.release, =1.1.1.release, =clark.sr1, =2.11.0, =2.0.0.release, =2.0.0.release, =1.6.0.release, =2.11.3 -...