Jorani Remote Code Execution

This Metasploit module exploits an unauthenticated remote code execution vulnerability in Jorani versions prior to 1.0.2. It abuses log poisoning and redirection bypass via header spoofing and then it uses path traversal to trigger the vulnerability. It has been tested on Jorani 1.0.0.

1.0.0 1.0.2 bypass code code execution exploits header log metasploit path path traversal poisoning redirection remote code remote code execution spoofing trigger unauthenticated vulnerability