CVE-2022-32272

CRITICAL

OPSWAT MetaDefender Core < 5.1.2 - Privilege Escalation via Incorrect Access Control

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-32272. PoCs published by Ulascan Yildirim.

AI-analyzed exploit summary This PoC exploits a privilege escalation vulnerability in OPSWAT Metadefender Core by manipulating the OMS_CSRF_TOKEN to elevate user roles to admin. It requires valid credentials and interacts with the API to modify user roles.

Description

OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.

Exploits (1)

exploitdb WORKING POC

by Ulascan Yildirim · pythonwebappsmultiple

https://www.exploit-db.com/exploits/51113

View Code ZIP pw:eip

This PoC exploits a privilege escalation vulnerability in OPSWAT Metadefender Core by manipulating the OMS_CSRF_TOKEN to elevate user roles to admin. It requires valid credentials and interacts with the API to modify user roles.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Trivial

Reliability

Reliable

Target: OPSWAT Metadefender Core 4.21.1

Auth required

Prerequisites: Valid username and password · Access to the target URL

MITRE ATT&CK