CVE-2024-53591 PoC — Seclore 安全漏洞

介绍

# CVE-2024-53591

#### Des: 
An issue in the login page of Seclore v3.27.5.0 allows attackers to enumerate valid domains (internal service) via a brute force attack.

#### POC: 
https://company/policyserver/redirectTprepositoryEntryAction.do?repoCode=10006, brute force repoCode parameter to find all hosted domains & internal services

## Discovered by Aljohara Abdulmohsen Alsubaie.. 

文件快照

备注