CVE-2022-24449 PoC — Solar appScreener 代码问题漏洞

Source

Associated Vulnerability

Description

Solar Appscreener XXE

Readme

# CVE-2022-24449
Solar Appscreener XXE
[Suggested description]
An issue was found in Solar AppScreener SAST tool through 3.10.4. An unauthorized actor, may exploit effected hosts where vulnerable version is installed, by uploading specially crafted XML files on hosts, which has an expired or non-installed license. The lowest approved impact is XXE-SSRF.
------------------------------------------
[Additional Information]
Fixed in >3.10.4
------------------------------------------
[VulnerabilityType Other]
CWE-611: Improper Restriction of XML External Entity Reference
------------------------------------------
[Vendor of Product]
SOLAR SECURITY LLC (https://en.rt-solar.ru/)
------------------------------------------
[Affected Product Code Base]
Affected version: Solar Appscreener 3.10.4
------------------------------------------
[Affected Component]
License update mechanism
------------------------------------------
[Attack Type]
Remote
------------------------------------------
[Impact Code execution]
true
------------------------------------------
[Impact Denial of Service]
true
------------------------------------------
[Impact Escalation of Privileges]
true
------------------------------------------
[Impact Information Disclosure]
true
------------------------------------------
[Attack Vectors]
An attacker able to upload specially crafted XML file via license update function
------------------------------------------
[Discoverer]
Dmitry Kuramin (Jet Infosystems, jet.su)
------------------------------------------
[Reference]
https://jet.su

File Snapshot

 [4.0K]  /data/pocs/a2123a60fe49bccf481184355049beded089ea34
├── [ 11M]  20220126_160130.mp4
├── [1.5K]  README.md
├── [318K]  xxe1.png
└── [249K]  xxe2.png

0 directories, 4 files

Remarks