CVE-2023-37679 PoC — NextGen Mirth Connect 命令注入漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37679.yaml

Associated Vulnerability

Title:NextGen Mirth Connect 命令注入漏洞 (CVE-2023-37679)
Description:NextGen Mirth Connect是美国NextGen公司的一个医疗集成引擎。 NextGen Mirth Connect v4.3.0版本存在安全漏洞，该漏洞源于允许攻击者在托管服务器上执行任意命令。

Description

Mirth Connect, by NextGen HealthCare, is an open source data integration platform widely used by healthcare companies. Versions prior to 4.4.1 are vulnerable to an unauthenticated remote code execution vulnerability

File Snapshot


 id: CVE-2023-37679

info:
  name: NextGen Mirth Connect - Remote Code Execution
  author: iamnoooob,

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!