CVE-2024-24590 PoC — Allegro 代码问题漏洞

Source

https://github.com/xffsec/CVE-2024-24590-ClearML-RCE-Exploit

Associated Vulnerability

Title:Allegro 代码问题漏洞 (CVE-2024-24590)
Description:Allegro是Allegro开源的一个主要针对视频游戏和多媒体编程的跨平台库。 Allegro AI ClearML 0.17.0版本及之后版本存在代码问题漏洞，该漏洞源于不可信数据反序列化。攻击者利用该漏洞可以执行任意代码。

Readme

# CVE-2024-24590-ClearML-RCE-Exploit

Python script that exploits the vulnerability CVE-2024-24590 in ClearML, leveraging pickle file deserialization to execute arbitrary code.

![screenshot](_img/screenshot.png)

## Installation

**Install the required dependencies before proceeding**

Tested on Python 3.9+

### Clone the Repository

```sh
git clone https://github.com/xffsec/CVE-2024-24590-ClearML-RCE-Exploit.git
cd CVE-2024-24590-ClearML-RCE-Exploit
python3 exploit.py
```

File Snapshot


 [4.0K]  /data/pocs/2b4ff8f86a175d0629ec5e367bf43309e2813b4d
├── [5.2K]  exploit.py
├── [4.0K]  _img
│   └── [ 10K]  screenshot.png
├── [ 479]  README.md
└── [  27]  requirements.txt

1 directory, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!