Skip to content
RCE in JXBrowser JavaScript/Java bridge
portswigger.net | research | #rce | #java | #portswigger | #reflection | #jxbrowser | #javascript-bridge | #desktop-app
Summary
Gareth Heyes finds remote code execution in JXBrowser's JavaScript-to-Java bridge, escalating from page script through Java reflection to reach dangerous classes like ProcessBuilder.
- Published
- Collected