CVE-2022-48565

CRITICAL

Python < 3.6.13 - XML External Entity Injection in plistlib Module

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-48565. PoCs published by Einstein2150.

AI-analyzed exploit summary This repository contains four Python-based PoC scripts demonstrating CVE-2022-48565, an unsafe deserialization vulnerability in Python's plistlib that allows arbitrary code execution via crafted Plist files. The exploits use eval() on deserialized Plist data to achieve RCE.

Description

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.

Exploits (1)

nomisec WORKING POC 3 stars

by Einstein2150 · poc

https://github.com/Einstein2150/CVE-2022-48565-POC

View Code ZIP pw:eip

This repository contains four Python-based PoC scripts demonstrating CVE-2022-48565, an unsafe deserialization vulnerability in Python's plistlib that allows arbitrary code execution via crafted Plist files. The exploits use eval() on deserialized Plist data to achieve RCE.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Python <=3.9.1 and Python 2.x (plistlib)

No auth needed

Prerequisites: Python <=3.9.1 or Python 2.x installed · Ability to deliver malicious Plist file to target

MITRE ATT&CK