.. / CVE-2022-22954

• RCE
• Nuclei
• Web

Exploit for VMware Workspace ONE Access - Server-Side Template Injection (CVE-2022-22954)

Description:

VMware Workspace ONE Access is susceptible to a remote code execution vulnerability due to a server-side template injection flaw. An unauthenticated attacker with network access could exploit this vulnerability by sending a specially crafted request to a vulnerable VMware Workspace ONE or Identity Manager.

Nuclei Template

View the template here CVE-2022-22954.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-22954.yaml

References: