CVE-2024-57378 PoC — Wazuh 安全漏洞

Source

https://github.com/rxerium/CVE-2024-57378

Associated Vulnerability

Title:Wazuh 安全漏洞 (CVE-2024-57378)
Description:Wazuh是Wazuh开源的一个应用软件。用于收集，汇总，索引和分析安全数据，帮助组织检测入侵，威胁和行为异常。 Wazuh 4.8.2版本存在安全漏洞，该漏洞源于包含一个访问控制错误问题。此问题允许未经授权创建内部用户，而无需分配任何现有用户角色，这可能导致权限提升或未经授权访问敏感资源。

Description

Detection for CVE-2024-57378

Readme

# CVE-2024-57378

 ## How does this detection method work?
 
This Nuclei HTTP template checks a target URL (and its /app/login page) for the Wazuh web interface, extracts the wazuhVersion value with a regex, and confirms the page is accessible (200 status) and actually a Wazuh UI (via title and keyword match). If the extracted version is 4.8.2, Nuclei reports a match

 ## How do I run this script?

1. Download Nuclei from [here](https://github.com/projectdiscovery/nuclei)
2. Copy the template to your local system
3. Run the following command: `nuclei -u https://yourHost.com -t template.yaml` 

## References

- https://nvd.nist.gov/vuln/detail/CVE-2024-57378


## Disclaimer

Use at your own risk, I will not be responsible for illegal activities you conduct on infrastructure you do not own or have permission to scan.

## Contact

Feel free to reach out to me on [Signal](https://signal.me/#eu/0Qd68U1ivXNdWCF4hf70UYFo7tB0w-GQqFpYcyV6-yr4exn2SclB6bFeP7wTAxQw).

File Snapshot


 [4.0K]  /data/pocs/83428cd64d3a7db8a3e84fde00a09f369c0e3ce5
├── [1.1K]  CVE-2024-57378.yaml
└── [ 970]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!