Exploitation Summary
EIP tracks 4 public exploits for CVE-2023-20052. PoCs published by nokn0wthing, tralsesec, MOHITSINGHPAPOLA.
AI-analyzed exploit summary This repository provides a working proof-of-concept for CVE-2023-20052, an information leak vulnerability in ClamAV's DMG file parser. The exploit leverages an XXE (XML External Entity) injection to read arbitrary files (e.g., /etc/passwd) when a malicious DMG file is scanned.
Description
On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process.
Exploits (4)
This repository provides a working proof-of-concept for CVE-2023-20052, an information leak vulnerability in ClamAV's DMG file parser. The exploit leverages an XXE (XML External Entity) injection to read arbitrary files (e.g., /etc/passwd) when a malicious DMG file is scanned.
This repository contains a functional exploit for CVE-2023-20052, which leverages an XXE vulnerability in ClamAV to read arbitrary files. The exploit generates a malicious DMG file with an embedded XXE payload to exfiltrate file contents.
This repository provides a fixed Docker build for exploiting CVE-2023-20052, a ClamAV XXE vulnerability. It resolves OpenSSL 3.0 compatibility issues by using Ubuntu 18.04 with OpenSSL 1.0, ensuring successful compilation of the exploit.
This repository provides a working proof-of-concept for CVE-2023-20052, an XML External Entity (XXE) injection vulnerability in ClamAV's DMG file parser. The exploit demonstrates how to craft a malicious DMG file to leak sensitive information from the system running ClamAV.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N