---
id: 5534
title: "RCE in JXBrowser JavaScript/Java bridge"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/rce-in-jxbrowser-javascript-java-bridge"
published_at: "2018-03-21T14:07:00Z"
tags: ["rce", "java", "portswigger", "reflection", "jxbrowser", "javascript-bridge", "desktop-app"]
phying_url: "https://phying.com/item/5534"
lang: en
---

# RCE in JXBrowser JavaScript/Java bridge

## Summary

Gareth Heyes finds remote code execution in JXBrowser's JavaScript-to-Java bridge, escalating from page script through Java reflection to reach dangerous classes like ProcessBuilder.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2018-03-21T14:07:00Z
- **Original:** https://portswigger.net/research/rce-in-jxbrowser-javascript-java-bridge
- **Phying News:** https://phying.com/item/5534