Land #10566, struts2_rest_xstream normalize_uri

2018-08-30 15:59:13 -05:00 · 2018-08-30 15:59:13 -05:00 · b9c9064c22
parent acca079cd1 7c7f63df45
commit b9c9064c22
1 changed files with 1 additions and 1 deletions
--- a/modules/exploits/multi/http/struts2_rest_xstream.rb
+++ b/modules/exploits/multi/http/struts2_rest_xstream.rb
@ -110,7 +110,7 @@ class MetasploitModule < Msf::Exploit::Remote

    res = send_request_cgi(
      'method' => 'POST',
-      'uri'    => target_uri.path,
+      'uri'    => normalize_uri(target_uri.path),
      'ctype'  => 'application/xml',
      'data'   => xstream_payload(cmd)
    )