Exploitation Summary
EIP tracks 3 public exploits for CVE-2023-0315.
PoCs published by Askar, mhaskar, Askar, jheysel-r7, including Metasploit module exploits/linux/http/froxlor_log_path_rce.
AI-analyzed exploit summary This exploit targets CVE-2023-0315 in Froxlor 2.0.3, achieving remote code execution by manipulating the logging path to inject a malicious Twig template. It establishes a reverse shell via netcat after authentication.
Description
Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8.
Exploits (3)
This exploit targets CVE-2023-0315 in Froxlor 2.0.3, achieving remote code execution by manipulating the logging path to inject a malicious Twig template. It establishes a reverse shell via netcat after authentication.
This is a functional exploit for CVE-2023-0315, targeting Froxlor 2.0.3. It leverages authenticated RCE by manipulating the logging path to inject a malicious Twig template, which executes a reverse shell payload.
This Metasploit module exploits CVE-2023-0315 in Froxlor v2.0.7 and below by leveraging an authenticated log path manipulation vulnerability to achieve remote command execution via Twig template injection.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H