Lucene search

K
githubexploit1FE10A65-1BC8-5233-B9B0-9367458C49EE
HistoryApr 25, 2024 - 7:51 p.m.

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Crushftp

2024-04-2519:51:38
301
cve-2024-4040
server side template injection
local file inclusion
crushftp
ssti
lfi
vulnerability
exploit
python

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.965

Percentile

99.6%

CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP

This …

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

10

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.965

Percentile

99.6%