CVE-2020-7361
CRITICALEasyCorp ZenTao Pro < 8.8.2 - Authenticated OS Command Injection via Repo Create Path Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-7361.
PoCs published by Daniel Monzón, Melvin Boers, Erik Wynter, including Metasploit module exploits/windows/http/zentao_pro_rce.
AI-analyzed exploit summary This Metasploit module exploits a command injection vulnerability in ZenTao Pro 8.8.2 and earlier versions via the 'Repo Create' function, allowing arbitrary command execution with SYSTEM privileges. It authenticates using provided credentials and injects commands into the 'path' parameter.
Description
The EasyCorp ZenTao Pro application suffers from an OS command injection vulnerability in its '/pro/repo-create.html' component. After authenticating to the ZenTao dashboard, attackers may construct and send arbitrary OS commands via the POST parameter 'path', and those commands will run in an elevated SYSTEM context on the underlying Windows operating system.
Exploits (1)
This Metasploit module exploits a command injection vulnerability in ZenTao Pro 8.8.2 and earlier versions via the 'Repo Create' function, allowing arbitrary command execution with SYSTEM privileges. It authenticates using provided credentials and injects commands into the 'path' parameter.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N