CVE-2023-46480 PoC — OwnCast 安全漏洞

Source

https://github.com/shahzaibak96/CVE-2023-46480

Associated Vulnerability

Title: OwnCast 安全漏洞 (CVE-2023-46480)
Description:An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.

Description

OwnCast SSRF

Readme

# CVE-2023-46480
OwnCast SSRF


Description
>An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.


POC
> 1. Browse the main page
> 2. Click name > Authenticate
> 3. Fill the arbritary host and click checkmark
> 4. Observe the result with response error and timing

Vulnerability Type
> Incorrect Access Control


Vendor of Product
> OwnCast


Affected Product Code Base
> OwnCast - 0.1.1


Affected Component
> authHost parameter of the indieauth function


Attack Type
> Remote


Attack Vectors
> An unauthenticated user can force the server to access localhost, internal network host, and external hosts and resources.


Reference
> https://owncast.online/
> 
> https://github.com/owncast/owncast


Discoverer
> Shahzaib Ali Khan

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →