Lucene search

K
githubexploitA3D2A528-97DF-5BCA-999E-70F1E2835F09
HistoryMay 13, 2024 - 5:33 p.m.

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Crushftp

2024-05-1317:33:36
82
exploit
server-side
vulnerability
crushftp
remote attackers
filesystem
authentication
administrative access
python
installation

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.966 High

EPSS

Percentile

99.6%

CVE-2024-4040 PoC

Python exploit for CVE-2024-4040

Descri…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.966 High

EPSS

Percentile

99.6%