.. / CVE-2016-0957

• Access Control
• Nuclei
• Web

Exploit for Adobe AEM Dispatcher <4.15 - Rules Bypass (CVE-2016-0957)

Description:

Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors.

Nuclei Template

View the template here CVE-2016-0957.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2016/CVE-2016-0957.yaml

References: