CVE-2021-3378
CRITICAL NUCLEIFortiLogger < 5.2.0 - Arbitrary File Upload via Hotspot Logo Upload
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2021-3378.
PoCs published by Berkan Er, erberkan, Berkan Er <[email protected]>, including Metasploit module exploits/windows/http/fortilogger_arbitrary_fileupload.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in FortiLogger via a maliciously crafted POST request. It uploads an ASP payload disguised as an image file and executes it to achieve remote code execution.
Description
FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.
Exploits (3)
This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in FortiLogger via a maliciously crafted POST request. It uploads an ASP payload disguised as an image file and executes it to achieve remote code execution.
This repository contains a functional Metasploit module that exploits an unauthenticated arbitrary file upload vulnerability in FortiLogger 4.4.2.2. The exploit uploads a malicious ASP file via a multipart POST request and executes it to achieve remote code execution.
This Metasploit module exploits an unauthenticated arbitrary file upload vulnerability in FortiLogger versions < 5.2.0. It uploads a malicious ASP file disguised as an image, then executes it to achieve remote code execution.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H