transmissionator/cve-2020-8644 repository overview

⁠Demo of CVE-2020-8644

⁠How to use

The below command will start a container and run playsms application. The playsms application will be running on TCP/8000.

docker run -d -p 8000:80 transmissionator/cve-2020-8644

⁠How to exploit

To reproduce this vulnerability, submit the below string as the username without any password.

{{`id`}}

You will see the output of the id command in the username field after following a redirect.