Sign upLogin

rapid7/metasploit-framework

View on GitHub
Star
modules/exploits/linux/http/apache_druid_js_rce.rb

Summary

Maintainability
B
4 hrs
Test Coverage

Method initialize has 66 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'Apache Druid 0.20.0 Remote Command Execution',
Severity: Major
Found in modules/exploits/linux/http/apache_druid_js_rce.rb - About 2 hrs to fix

    Method execute_command has 43 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def execute_command(cmd, _opts = {})
    gencmd = '/bin/sh`@~-c`@~' + cmd
    genvar = Rex::Text.rand_text_alpha(8..12)
    genname = Rex::Text.rand_text_alpha(8..12)
    vprint_status("cmd= #{gencmd}   var=#{genvar}   name=#{genname}")
    Severity: Minor
    Found in modules/exploits/linux/http/apache_druid_js_rce.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status