CVE-2021-23758
HIGHajaxpro.2 < 21.10.30.1 and AjaxNetProfessional < 21.11.29.1 - Remote Code Execution via Untrusted Data Deserialization
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2021-23758.
PoCs published by numanturle, Hans-Martin Münch (MOGWAI LABS), Jemmy Wang, including Metasploit module exploits/windows/http/ajaxpro_deserialization_rce.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2021-23758, a deserialization vulnerability in Ajax.NET Professional. The exploit leverages a crafted HTTP POST request with a malicious payload to achieve remote code execution (RCE) via the `System.Windows.Data.ObjectDataProvider` type.
Description
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.
Exploits (2)
This repository contains a functional proof-of-concept exploit for CVE-2021-23758, a deserialization vulnerability in Ajax.NET Professional. The exploit leverages a crafted HTTP POST request with a malicious payload to achieve remote code execution (RCE) via the `System.Windows.Data.ObjectDataProvider` type.
This Metasploit module exploits an insecure deserialization vulnerability in AjaxPro to achieve remote code execution. It constructs malicious JSON data that triggers arbitrary command execution via the `ObjectDataProvider` and `Process` classes.
References (3)
Scores
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H