关联漏洞
标题:Apache Superset 输入验证错误漏洞 (CVE-2024-34693)Description:Apache Superset是美国阿帕奇（Apache）基金会的一个数据可视化和数据探索平台。 Apache Superset 3.1.3 之前、4.0.0 版本存在输入验证错误漏洞，该漏洞源于允许经过身份验证的攻击者创建启用 local_infile 的 MariaDB 连接，从服务器读取文件并将其内容插入 MariaDB 数据库表中。
介绍
# CVE-2024-34693 Exploit
This repository contains a sophisticated Python script to exploit the CVE-2024-34693 vulnerability in Apache Superset. The script sets up a rogue MySQL server and creates a malicious MariaDB connection to exfiltrate the content of a specified file from the target system.
![[Screenshot_1.png]](https://raw.githubusercontent.com/Mr-r00t11/CVE-2024-34693/main/img/Screenshot_1.png)
## Description
The `CVE-2024-34693` vulnerability allows attackers with the ability to create arbitrary database connections to perform `LOAD DATA LOCAL INFILE` attacks, resulting in the reading of arbitrary files on the target system.
## Features
- **Automated Setup**: Sets up a rogue MySQL server using Bettercap.
- **Malicious Connection**: Creates a malicious MariaDB connection to exfiltrate files.
- **Improved Logging**: Provides detailed logging for better tracking and debugging.
- **Error Handling**: Graceful error handling and meaningful error messages.
## Prerequisites
- Python 3.x
- Bettercap
- Docker and Docker Compose (for setting up the Apache Superset environment)
## Installation
1. Clone the repository:
```sh
git clone https://github.com/Mr-r00t11/CVE-2024-34693-exploit.git
cd CVE-2024-34693-exploit
```
Run the exploit script with appropriate arguments:
```sh
python3 exploit_cve_2024_34693.py http://localhost:8088 /etc/passwd
```
Replace `http://localhost:8088` with the URL of your Apache Superset instance and `/etc/passwd` with the path of the file you wish to exfiltrate.
文件快照
[4.0K] /data/pocs/5ee2c9a5d2f230b8810b663ddffd195f747e77cd
├── [3.0K] exploit_cve_2024_34693.py
├── [4.0K] img
│ └── [ 68K] Screenshot_1.png
└── [1.5K] README.md
1 directory, 3 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮件到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对 POC 代码进行快照，为了长期维护，请考虑为本地 POC 付费/捐赠，感谢您的支持。