Fix missing normalize_uri in struts2_rest_xstream

I missed this one previously. May not be necessary but nice to have.
2018-08-30 15:55:14 -05:00 · 2018-08-30 15:55:14 -05:00 · 7c7f63df45
parent acca079cd1
commit 7c7f63df45
1 changed files with 1 additions and 1 deletions
--- a/modules/exploits/multi/http/struts2_rest_xstream.rb
+++ b/modules/exploits/multi/http/struts2_rest_xstream.rb
@ -110,7 +110,7 @@ class MetasploitModule < Msf::Exploit::Remote

    res = send_request_cgi(
      'method' => 'POST',
-      'uri'    => target_uri.path,
+      'uri'    => normalize_uri(target_uri.path),
      'ctype'  => 'application/xml',
      'data'   => xstream_payload(cmd)
    )