Lucene search

K
githubexploit0628E3C3-44C0-5F5A-B560-49E1BFBB5A22
HistoryNov 18, 2023 - 4:35 a.m.

Exploit for Incorrect Comparison in Dynamic-Linq Linq

2023-11-1804:35:37
444
rce vulnerability
dynamic linq
c# function calls
command execution
ncc group
linq injection
injection to rce
cve-2023-32571
system.diagnostics.process
createinstanceandunwrap
appdomain
start method

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.4%

Dynamic Linq injection to RCE - CVE-2023-32571

About Dynami…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.4%

Related for 0628E3C3-44C0-5F5A-B560-49E1BFBB5A22