CVE-2024-29059
HIGH KEV NUCLEI.NET Framework - Leaking ObjRefs via HTTP .NET Remoting
Title source: nucleiExploitation Summary
CVE-2024-29059 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added February 4, 2025. EIP tracks 1 public exploit from researchers including codewhitesec. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a proof-of-concept exploit for CVE-2024-29059, which involves leaking `ObjRef` objects via HTTP .NET Remoting and exploiting deserialization vulnerabilities under `TypeFilterLevel.Low` restrictions. It includes a vulnerable ASP.NET application setup guide, detection methods for `ObjRef` leaks, example payloads, and an exploit script for delivering payloads.
Description
.NET Framework Information Disclosure Vulnerability
Exploits (1)
This repository provides a proof-of-concept exploit for CVE-2024-29059, which involves leaking `ObjRef` objects via HTTP .NET Remoting and exploiting deserialization vulnerabilities under `TypeFilterLevel.Low` restrictions. It includes a vulnerable ASP.NET application setup guide, detection methods for `ObjRef` leaks, example payloads, and an exploit script for delivering payloads.
Nuclei Templates (1)
Server: MS .NET Remoting || server: ms .net remoting
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N