CVE-2024-32462 PoC — Flatpak 安全漏洞

Description

CVE-2024-32462 code exec sbx escape

介绍

# CVE-2024-32462
CVE-2024-32462 code exec sbx escape

How the directory should look to compile this

    ├── org.exploit.SandboxEscape.yaml
    ├── exploit.py
    └── app/
        └── exploit.desktop

How to run & build

1.Install Flatpak SDK (if needed):
  
    flatpak install flathub org.freedesktop.Platform//21.08
  
    flatpak install flathub org.freedesktop.Sdk//21.08

2.Build the Flatpak PoC:

    flatpak-builder --force-clean build-dir org.exploit.SandboxEscape.yaml

3.Install & run:

    flatpak-builder --user --install --force-clean build-dir org.exploit.SandboxEscape.yaml
  
    flatpak run org.exploit.SandboxEscape

文件快照

备注