Exploitation Summary
CVE-2024-23055 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
An issue in Plone Docker Official Image 5.2.13 (5221) open-source software allows for remote code execution via improper validation of input by the HOST headers.
Nuclei Templates (1)
Plone Docker - Host Header Injection
MEDIUMVERIFIEDby theamanrawat
Shodan:
http.component:"Plone"
References (3)
Core 3
Core References
Broken Link
http://plone.com
Product
http://ploneorg.com
Exploit, Third Party Advisory
https://github.com/c0d3x27/CVEs/tree/main/CVE-2024-23055
Scores
CVSS v3
6.1
EPSS
0.0126
EPSS Percentile
65.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
Status
published
Products (1)
plone/plone_docker_official_image
5.2.13
Published
Jan 25, 2024
Tracked Since
Feb 18, 2026