CVE-2022-24449 PoC — Solar appScreener 代码问题漏洞

Source

https://github.com/jet-pentest/CVE-2022-24449

Associated Vulnerability

Title:Solar appScreener 代码问题漏洞 (CVE-2022-24449)
Description:Solar appScreener是Solar appScreener公司的一种静态应用程序安全测试 (SAST) 工具。用于检测二进制和源代码中的漏洞和后门。 Solar appScreener 3.10.4 及之前版本存在安全漏洞，该漏洞源于当没有有效许可证时，允许通过精心制作的 XML 文档进行 XXE 和 SSRF 攻击。

Description

Solar Appscreener XXE

Readme

# CVE-2022-24449
Solar Appscreener XXE
[Suggested description]
An issue was found in Solar AppScreener SAST tool through 3.10.4. An unauthorized actor, may exploit effected hosts where vulnerable version is installed, by uploading specially crafted XML files on hosts, which has an expired or non-installed license. The lowest approved impact is XXE-SSRF.
------------------------------------------
[Additional Information]
Fixed in >3.10.4
------------------------------------------
[VulnerabilityType Other]
CWE-611: Improper Restriction of XML External Entity Reference
------------------------------------------
[Vendor of Product]
SOLAR SECURITY LLC (https://en.rt-solar.ru/)
------------------------------------------
[Affected Product Code Base]
Affected version: Solar Appscreener 3.10.4
------------------------------------------
[Affected Component]
License update mechanism
------------------------------------------
[Attack Type]
Remote
------------------------------------------
[Impact Code execution]
true
------------------------------------------
[Impact Denial of Service]
true
------------------------------------------
[Impact Escalation of Privileges]
true
------------------------------------------
[Impact Information Disclosure]
true
------------------------------------------
[Attack Vectors]
An attacker able to upload specially crafted XML file via license update function
------------------------------------------
[Discoverer]
Dmitry Kuramin (Jet Infosystems, jet.su)
------------------------------------------
[Reference]
https://jet.su

File Snapshot


 [4.0K]  /data/pocs/a2123a60fe49bccf481184355049beded089ea34
├── [ 11M]  20220126_160130.mp4
├── [1.5K]  README.md
├── [318K]  xxe1.png
└── [249K]  xxe2.png

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!