From df2c94f8733e2ceaaf81c19fac13f21f5b3a4985 Mon Sep 17 00:00:00 2001 From: sfewer-r7 Date: Wed, 13 Mar 2024 09:14:23 +0000 Subject: [PATCH] anther typo --- .../multi/http/jetbrains_teamcity_rce_cve_2024_27198.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2024_27198.rb b/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2024_27198.rb index 39481f4151..4098c53871 100644 --- a/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2024_27198.rb +++ b/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2024_27198.rb @@ -310,7 +310,7 @@ class MetasploitModule < Msf::Exploit::Remote # We start the payload in a new thread via some Spring Expression Language (SpEL). bootstrap_spel = "\#{ new java.lang.Thread(#{payload_bean_id}).start() }" - # NOTE: We place bootstrap_spel in a separate bean, as it this generates an exception the plugin will fail + # NOTE: We place bootstrap_spel in a separate bean, as if this generates an exception the plugin will fail # to load correctly, which prevents the exploit from deleting the plugin later. We choose java.beans.Encoder # as the setExceptionListener method will accept the null value the bootstrap_spel will generate. If we # choose a property that does not exist, we generate several exceptions in the teamcity-server.log.