💣Exploit CVE-2018-9471 - Apache Tomcat NanoAppFilter Java Deserialization-Type Confusion Local Privilege Escalation Vulnerability

[Mental_Outlaw]

CVE ID : CVE-2018-9471
Published : Nov. 20, 2024, 6:15 p.m. | 1 hour, 55 minutes ago
Description : In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is not needed for exploitation.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.