CVE-2024-41570

2024-08-0900:00:00

mitre

github.com

server-side request forgery

havoc 2.0.7

demon callback handling

arbitrary network traffic

team server

AI Score

Confidence

High

EPSS

0.001

Percentile

43.9%

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

total

JSON

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:c5pider:havoc:c2_0.74:*:*:*:*:*:*:*"
    ],
    "vendor": "c5pider",
    "product": "havoc",
    "versions": [
      {
        "status": "affected",
        "version": "c2_0.74"
      }
    ],
    "defaultStatus": "unknown"
  }
]