CVE-2024-6922 PoC — Automation Anywhere Automation 360 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6922.yaml

Associated Vulnerability

Title:Automation Anywhere Automation 360 安全漏洞 (CVE-2024-6922)
Description:Automation Anywhere Automation 360是美国Automation Anywhere公司的一个云原生端到端智能自动化平台。 Automation Anywhere Automation 360 v21版本至v32版本存在安全漏洞。攻击者利用该漏洞可以触发来自服务器的任意Web请求。

Description

Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component.

File Snapshot


 id: CVE-2024-6922

info:
  name: Automation Anywhere Automation 360 - Server-Side Request Forgery
  

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!