{"uuid": "fe682b5b-8e72-4703-8222-eb1c53ec6d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-2460", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb", "content": "{\"aliases\": [], \"arch\": \"java, x86\", \"author\": [\"Adam Gowdiak\", \"Matthias Kaiser\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module abuses the insecure invoke() method of the ProviderSkeleton class that\\n          allows to call arbitrary static methods with user supplied arguments. The vulnerability\\n          affects Java version 7u21 and earlier.\", \"disclosure_date\": \"2013-06-18\", \"fullname\": \"exploit/multi/browser/java_jre17_provider_skeleton\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Java Applet ProviderSkeleton Insecure Invoke Method\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/java_jre17_provider_skeleton.rb\", \"platform\": \"Java,Linux,OSX,Windows\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"multi/browser/java_jre17_provider_skeleton\", \"references\": [\"CVE-2013-2460\", \"OSVDB-94346\", \"URL-http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html\", \"URL-http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/160cde99bb1a\", \"URL-http://www.security-explorations.com/materials/SE-2012-01-ORACLE-12.pdf\", \"URL-http://www.security-explorations.com/materials/se-2012-01-61.zip\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Generic (Java Payload)\", \"Windows x86 (Native Payload)\", \"Mac OS X x86 (Native Payload)\", \"Linux x86 (Native Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:37.218678Z"}