Exploitation Summary
EIP tracks 2 public exploits for CVE-2024-45241. PoCs published by verylazytech, d4lyw. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository provides a detailed technical writeup on CVE-2024-45241, a path traversal vulnerability in CentralSquare CryWolf's GeneralDocs.aspx component. It includes exploitation steps, affected parameters, and screenshots demonstrating the vulnerability.
Description
A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information.
Exploits (2)
This repository provides a detailed technical writeup on CVE-2024-45241, a path traversal vulnerability in CentralSquare CryWolf's GeneralDocs.aspx component. It includes exploitation steps, affected parameters, and screenshots demonstrating the vulnerability.
The repository provides a detailed technical description of a path traversal vulnerability in CentralSquare's CryWolf application, including reproduction steps and references. It explains how unauthenticated attackers can read sensitive files by manipulating the 'rpt' parameter in 'GeneralDocs.aspx' and accessing the contents via 'gdoc1.ashx'.
Nuclei Templates (1)
False Alarm Reduction Website
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N