CVE-2024-46627 PoC — DATAGERRY 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46627.yaml

Associated Vulnerability

Title:DATAGERRY 安全漏洞 (CVE-2024-46627)
Description:DATAGERRY是DATAGerry开源的一个开源 CMDB 和资产管理工具。 DATAGERRY 2.2版本存在安全漏洞，该漏洞源于存在不正确权限改造，允许攻击者通过精心设计的Web请求执行任意命令。

Description

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests.

File Snapshot


 id: CVE-2024-46627

info:
  name: DATAGERRY - REST API Auth Bypass
  author: gy741
  severity: criti

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!