CVE-2024-5262

Summary

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login.

Affected Software

Weaknesses

• CWE-552: CWE-552 Files or Directories Accessible to External Parties

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

CVE Program Container

Additional References

• https://zuso.ai/advisory/za-2024-01
• https://github.com/projectdiscovery/interactsh/pull/874

References

• https://zuso.ai/advisory/za-2024-01
• https://github.com/projectdiscovery/interactsh/pull/874

• ←Previous
• Next→