CVE-2024-24590 PoC — Allegro 代码问题漏洞

Source

Associated Vulnerability

Description

With this script you can exploit the CVE-2024-24590

Readme

# Clearml-CVE-2024-24590

CVE-2024-24590 is a vulnerability that can be exploited when there is improper deserialization on the server side, in this case, Clearml.

When an attacker creates a malicious Pickle file, they can execute arbitrary code on the victim who deserializes the Pickle file, which can escalate to a reverse shell for remote command execution.


Don't forget to install clearml lib
``` 
python -m venv .g
source .g/bin/activate/
pip install clearml
```

File Snapshot

 [4.0K]  /data/pocs/3c6e9ee3778b52b13ca6eccfe1da4c4e424620f2
├── [ 473]  README.md
└── [ 786]  scriptls.py

0 directories, 2 files

Remarks