Lucene search

K
githubexploit7430153C-B4C2-5D19-841D-38CCCBC47DFE
HistoryJun 14, 2023 - 9:43 a.m.

Exploit for Path Traversal in Igniterealtime Openfire

2023-06-1409:43:31
389
path traversal
igniterealtime
openfire
cve-2023-32315
exploit
webshell
commands

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

0.974 High

EPSS

Percentile

99.9%

CVE-2023-32315

0x01 获取返回的JSESSIONID和csrftoken ,构造请求包新增用户(替换JS…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

0.974 High

EPSS

Percentile

99.9%