CVE-2023-23397 PoC — Microsoft Outlook Elevation of Privilege Vulnerability

Source

Associated Vulnerability

Description

Exploit POC for CVE-2023-23397

Readme

# CVE-2023-23397-POC
Exploit POC for CVE-2023-23397

Appointment.cs : the modified file from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit/Appointment.cs

Exploit.cs  : the code i used to replicate creating the malicious appointment . i modified the code picture in MDSEC article here : https://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability/

MsgKit.dll : the compiled library from https://github.com/Sicos1977/MsgKit/blob/master/MsgKit which you need to modify to make the exploit work

this POC created for research purposes and am not responsible for any malicious use.

File Snapshot

 [4.0K]  /data/pocs/161a3aaf60f774aa5ea5e9e7ffe291f54c06124d
├── [6.0K]  Appointment.cs
├── [1.3K]  Exploit.cs
├── [341K]  MsgKit.dll
└── [ 641]  README.md

0 directories, 4 files

Remarks