CVE-2024-46310 PoC — Cfx.re FXServer 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46310.yaml

Associated Vulnerability

Title:Cfx.re FXServer 安全漏洞 (CVE-2024-46310)
Description:Cfx.re FXServer是Cfx.re公司的一个平台服务器。 Cfx.re FXServer v9601及之前版本存在安全漏洞，该漏洞源于错误访问控制，允许未经身份验证的用户通过公开的 API 端点修改和读取任意用户数据。

Description

Incorrect Access Control in FXServer version's v9601 and prior, for CFX.re FiveM, allows unauthenticated users to modify and read userdata via exposed api endpoint.

File Snapshot


 id: CVE-2024-46310

info:
  name: FXServer < v9601 - Information Exposure
  author: s4e-io
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!