Other nomination
A New Attack Interface In Java Application
Treats attacker-controlled JDBC connection properties as an attack surface: across seven database drivers they yield JNDI injection, log-file writes that plant a webshell, multibyte-charset SQL injection, arbitrary class instantiation, full-read SSRF and command execution from a malicious server.
Record
- Researcher
- Xu Yuanzhen and Peter Mularien
- Format
- Whitepaper
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Xu Yuanzhen and Peter Mularien, first published at the original source. Preserved copies are kept so the citation survives its host.