CVE-2024-21893

This repository contains a functional exploit for CVE-2024-21893, an SSRF vulnerability in Ivanti Connect Secure and Ivanti Policy Secure. The exploit crafts a malicious SOAP request with a manipulated SAML signature to trigger an external request to an attacker-controlled server, demonstrating the vulnerability.

This repository contains a functional exploit for CVE-2024-21893 (SSRF) and CVE-2024-21887 (RCE) in Ivanti Connect Secure appliances. The exploit uses a crafted SOAP request to trigger SSRF and command injection, leading to unauthenticated remote code execution.

This Metasploit module chains CVE-2024-21893 (SSRF) and CVE-2024-21887 (command injection) to achieve unauthenticated RCE on Ivanti Connect Secure/Policy Secure. It exploits an SSRF in the xmltooling library to trigger a command injection in a Python backend service.