automatic module_metadata_base.json update

Author: msjenkins-r7

db/modules_metadata_base.json

@@ -102029,17 +102029,19 @@
     "author": [
       "h00die-gr3y <[email protected]>",
       "jheysel-r7",
-      "Steve Ikeoka"
+      "Steve Ikeoka",
+      "Valentin Lobstein a.k.a chocapikk"
     ],
     "description": "GeoServer is an open-source software server written in Java that provides\n          the ability to view, edit, and share geospatial data.\n          It is designed to be a flexible, efficient solution for distributing geospatial data\n          from a variety of sources such as Geographic Information System (GIS) databases,\n          web-based data, and personal datasets.\n          In the GeoServer versions < 2.23.6, >= 2.24.0, < 2.24.4 and >= 2.25.0, < 2.25.1,\n          multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users\n          through specially crafted input against a default GeoServer installation due to unsafely\n          evaluating property names as XPath expressions.\n          An attacker can abuse this by sending a POST request with a malicious xpath expression\n          to execute arbitrary commands as root on the system.",
     "references": [
       "CVE-2024-36401",
       "URL-https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv",
       "URL-https://github.com/vulhub/vulhub/tree/master/geoserver/CVE-2024-36401",
-      "URL-https://attackerkb.com/topics/W6IDY2mmp9/cve-2024-36401"
+      "URL-https://attackerkb.com/topics/W6IDY2mmp9/cve-2024-36401",
+      "URL-https://github.com/Chocapikk/CVE-2024-36401"
     ],
-    "platform": "Linux,Unix",
-    "arch": "cmd, x86, x64, aarch64, armle",
+    "platform": "Linux,Unix,Windows",
+    "arch": "cmd",
     "rport": 8080,
     "autofilter_ports": [
       80,
@@ -102058,10 +102060,9 @@
     ],
     "targets": [
       "Unix Command",
-      "Linux Dropper",
       "Windows Command"
     ],
-    "mod_time": "2024-07-16 11:20:35 +0000",
+    "mod_time": "2024-08-16 09:39:38 +0000",
     "path": "/modules/exploits/multi/http/geoserver_unauth_rce_cve_2024_36401.rb",
     "is_install_path": true,
     "ref_name": "multi/http/geoserver_unauth_rce_cve_2024_36401",