CVE-2024-23334 PoC — aiohttp 路径遍历漏洞

Source

Associated Vulnerability

Description

A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1

Readme

# CVE-2024-23334-PoC
A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1

## Requirements
* **python3-venv**
> ```sudo apt install python3-venv```

## Lab setup
```bash
git clone https://github.com/z3rObyte/CVE-2024-23334-PoC
cd CVE-2024-23334-PoC
python3 -m venv .env
chmod +x ./.env/bin/activate
source ./.env/bin/activate
pip3 install -r requirements.txt
python3 server.py
```
## Exploit it!
You can use the exploit that comes in the repository:
```
bash exploit.sh
```

File Snapshot

 [4.0K]  /data/pocs/c50667d1cf591652d568080e78de493184a70d5c
├── [ 462]  exploit.sh
├── [ 518]  README.md
├── [  15]  requirements.txt
├── [ 637]  server.py
└── [4.0K]  static
    └── [  15]  file.txt

1 directory, 5 files

Remarks