Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-9580. PoCs published by mpgn.
AI-analyzed exploit summary This PoC demonstrates a CORS misconfiguration in StackStorm versions prior to 2.9.3 and 2.10.3, allowing an attacker to exploit null origin requests to achieve RCE via the `core.remote` action. The exploit involves sending a malicious payload to execute arbitrary commands on the target host.
Description
In st2web in StackStorm Web UI before 2.9.3 and 2.10.x before 2.10.3, it is possible to bypass the CORS protection mechanism via a "null" origin value, potentially leading to XSS.
Exploits (1)
This PoC demonstrates a CORS misconfiguration in StackStorm versions prior to 2.9.3 and 2.10.3, allowing an attacker to exploit null origin requests to achieve RCE via the `core.remote` action. The exploit involves sending a malicious payload to execute arbitrary commands on the target host.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N