CVE-2024-24590 PoC — Allegro 代码问题漏洞

Source

Associated Vulnerability

Description

With this script you can exploit the CVE-2024-24590

Readme

# Clearml-CVE-2024-24590

CVE-2024-24590 is a vulnerability that can be exploited when there is improper deserialization on the server side, in this case, Clearml.

When an attacker creates a malicious Pickle file, they can execute arbitrary code on the victim who deserializes the Pickle file, which can escalate to a reverse shell for remote command execution.


Don't forget to install clearml lib
``` 
python -m venv .g
source .g/bin/activate/
pip install clearml
```

File Snapshot

 [4.0K]  /data/pocs/1ea3e00a2fe91885580bdfd1561dee4b2b6a74e6
├── [ 473]  README.md
└── [ 786]  scriptls.py

0 directories, 2 files

Remarks