CVE-2024-32651
CRITICAL NUCLEIchangedetection.io <=0.45.20 - Remote Command Execution via Jinja2 SSTI
Title source: manualExploitation Summary
EIP tracks 5 public exploits for CVE-2024-32651. PoCs published by s0ck3t-s3c, zcrosman, Eggzy. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2024-32651, targeting a Server-Side Template Injection (SSTI) vulnerability in changedetection.io <= 0.45.20. The exploit automates the process of obtaining a CSRF token, submitting a crafted form, and delivering a payload that triggers a reverse shell via SSTI.
Description
changedetection.io is an open source web page change detection, website watcher, restock monitor and notification service. There is a Server Side Template Injection (SSTI) in Jinja2 that allows Remote Command Execution on the server host. Attackers can run any system command without any restriction and they could use a reverse shell. The impact is critical as the attacker can completely takeover the server machine. This can be reduced if changedetection is behind a login page, but this isn't required by the application (not by default and not enforced).
Exploits (5)
This repository contains a functional Python exploit for CVE-2024-32651, targeting a Server-Side Template Injection (SSTI) vulnerability in changedetection.io <= 0.45.20. The exploit automates the process of obtaining a CSRF token, submitting a crafted form, and delivering a payload that triggers a reverse shell via SSTI.
This repository contains a functional exploit for CVE-2024-32651, demonstrating an RCE vulnerability in changedetection.io <= 0.45.20 via Server-Side Template Injection (SSTI). The exploit uses a crafted notification template to execute arbitrary commands, establishing a reverse shell.
This repository contains a functional Python exploit for CVE-2024-32651, targeting a Server-Side Template Injection (SSTI) vulnerability in changedetection.io <= 0.45.20. The exploit chains authentication bypass (if needed), CSRF token extraction, and SSTI payload delivery to achieve remote code execution via a reverse shell.
This is a technical writeup detailing the exploitation chain for the Trickster HTB machine, including CVE-2024-32651 (SSTI in ChangeDetection.io) and other vulnerabilities. It provides a step-by-step breakdown of the attack path but does not include functional exploit code.
This repository provides a detailed technical walkthrough of exploiting multiple vulnerabilities (CVE-2024-34716, CVE-2024-32651, CVE-2023-47268) on the Trickster HTB machine, including XSS, SSTI, and privilege escalation techniques. It describes the attack chain but does not include functional exploit code.
Nuclei Templates (1)
html:"Change Detection"
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H