CVE-2024-45241 PoC — CentralSquare CryWolf 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45241.yaml

Associated Vulnerability

Title:CentralSquare CryWolf 安全漏洞 (CVE-2024-45241)
Description:CentralSquare CryWolf是CentralSquare公司的一个误报管理系统。 CentralSquare CryWolf 存在安全漏洞，该漏洞源于 GeneralDocs.aspx 包含一个路径遍历漏洞。

Description

A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information.

File Snapshot


 id: CVE-2024-45241

info:
  name: CentralSquare CryWolf - Path Traversal
  author: s4e-io
  severity

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!