#ssti

CVE-2022-22954 VMware Workspace ONE Access Server-side Template Injection RCE

看路由是在catalog-portal app下，cd到/opt/vmware/horizon/workspace/webapps/catalog-portal，然后把jar包拖出来解压之后，grep -irn "console.log"。