Land #10566, struts2_rest_xstream normalize_uri

2018-08-30 15:59:13 -05:00 · 2018-08-30 15:59:13 -05:00 · 4360b9e82e
parent 2ecff39be4
commit 4360b9e82e
1 changed files with 1 additions and 1 deletions
--- a/modules/exploits/multi/http/struts2_rest_xstream.rb
+++ b/modules/exploits/multi/http/struts2_rest_xstream.rb
@ -110,7 +110,7 @@ class MetasploitModule < Msf::Exploit::Remote

    res = send_request_cgi(
      'method' => 'POST',
-      'uri'    => target_uri.path,
+      'uri'    => normalize_uri(target_uri.path),
      'ctype'  => 'application/xml',
      'data'   => xstream_payload(cmd)
    )