.. / CVE-2019-16469

Exploit for Adobe Experience Manager - Expression Language Injection (CVE-2019-16469)

Description:

Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 has an expression language injection vulnerability.

Nuclei Template

View the template here CVE-2019-16469.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-16469.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2019-16469
https://nozero.io/en/cve-2019-16469-adobe-aem-expression-language-injection/
https://owasp.org/www-community/vulnerabilities/Expression_Language_Injection