Sign upLogin

rapid7/metasploit-framework

View on GitHub
Star
modules/exploits/multi/http/dotcms_file_upload_rce.rb

Summary

Maintainability
A
3 hrs
Test Coverage

Method initialize has 57 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def initialize(info = {})
    super(
      update_info(
        info,
        'Name' => 'DotCMS RCE via Arbitrary File Upload.',
Severity: Major
Found in modules/exploits/multi/http/dotcms_file_upload_rce.rb - About 2 hrs to fix

    Method check has 33 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def check
    test_content = Rex::Text.rand_text_alpha(10)
    test_file = "#{test_content}.jsp"
    test_path = "../../#{test_file}"
    uuid = Faker::Internet.uuid
    Severity: Minor
    Found in modules/exploits/multi/http/dotcms_file_upload_rce.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status