CVE-2024-25153
CRITICALFileCatalyst Workflow Web Portal - Path Traversal
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-25153. PoCs published by nettitude, rainbowhatrkn.
AI-analyzed exploit summary This is a functional exploit for CVE-2024-25153, achieving remote code execution in Fortra FileCatalyst Workflow by uploading a malicious JSP file via a directory traversal vulnerability in the FTP servlet. The exploit leverages anonymous login and executes arbitrary commands via the uploaded JSP shell.
Description
A directory traversal within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ directory with a specially crafted POST request. In situations where a file is successfully uploaded to web portal’s DocumentRoot, specially crafted JSP files could be used to execute code, including web shells.
Exploits (2)
This is a functional exploit for CVE-2024-25153, achieving remote code execution in Fortra FileCatalyst Workflow by uploading a malicious JSP file via a directory traversal vulnerability in the FTP servlet. The exploit leverages anonymous login and executes arbitrary commands via the uploaded JSP shell.
This repository contains a functional exploit for CVE-2024-25153, a remote code execution vulnerability in Fortra FileCatalyst Workflow. The exploit leverages an unauthenticated file upload vulnerability to deploy a JSP webshell and execute arbitrary commands.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H