CVE-2024-24590 PoC — Allegro 代码问题漏洞

Description

With this script you can exploit the CVE-2024-24590

Readme

# Clearml-CVE-2024-24590

CVE-2024-24590 is a vulnerability that can be exploited when there is improper deserialization on the server side, in this case, Clearml.

When an attacker creates a malicious Pickle file, they can execute arbitrary code on the victim who deserializes the Pickle file, which can escalate to a reverse shell for remote command execution.


Don't forget to install clearml lib
``` 
python -m venv .g
source .g/bin/activate/
pip install clearml
```

File Snapshot

Remarks