CVE-2023-43177
CRITICAL EXPLOITED IN THE WILD NUCLEICrushFTP Unauthenticated RCE
Title source: metasploitExploitation Summary
CVE-2023-43177 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 2 public exploits from researchers including the-emmons, Ryan Emmons, Christophe De La Fuente, including a Metasploit module exploits/multi/http/crushftp_rce_cve_2023_43177.
A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-43177, targeting CrushFTP versions below 10.5.2. The exploit demonstrates an authentication bypass, session hijacking, and privilege escalation leading to remote code execution (RCE).
Description
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.
Exploits (2)
This repository contains a functional exploit for CVE-2023-43177, targeting CrushFTP versions below 10.5.2. The exploit demonstrates an authentication bypass, session hijacking, and privilege escalation leading to remote code execution (RCE).
This Metasploit module exploits CVE-2023-43177, an unauthenticated RCE vulnerability in CrushFTP versions prior to 10.5.1, by manipulating session properties via crafted HTTP headers to achieve remote code execution.
Nuclei Templates (1)
http.html:"crushftp"
body="crushftp"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H