Lucene search

K
githubexploitF5F11457-A487-5FC0-91F8-21E35576FB2F
HistoryNov 09, 2023 - 9:22 p.m.

Exploit for Code Injection in Craterapp Crater

2023-11-0921:22:47
323
craterapp
code injection
unrestricted file upload
dangerous type
input validation
rce
superadmin
payload
company logo
api
target url
email
password
command execution
tested
kali
references
proof of concept
disclaimer

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

31.9%

Crater-CVE-2023-46865-RCE

Crater <=6.0.6, CVE-2023-46865 Po…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.001

Percentile

31.9%

Related for F5F11457-A487-5FC0-91F8-21E35576FB2F