CVE-2024-45712
LOWSolarWinds Serv-U < 15.5.1 - Authenticated Stored Cross-Site Scripting
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-45712. PoCs published by tdawg506, Teexo.
AI-analyzed exploit summary This repository contains a Python-based scanner for detecting WooCommerce installations and testing for CVE-2024-45712, an unauthenticated privilege escalation vulnerability. It checks for the WooCommerce REST API, attempts version detection, and tests for vulnerability by creating a test order.
Description
SolarWinds Serv-U is vulnerable to a client-side cross-site scripting (XSS) vulnerability. The vulnerability can only be performed by an authenticated account, on the local machine, from the local browser session. Therefore the risk is very low.
Exploits (2)
This repository contains a Python-based scanner for detecting WooCommerce installations and testing for CVE-2024-45712, an unauthenticated privilege escalation vulnerability. It checks for the WooCommerce REST API, attempts version detection, and tests for vulnerability by creating a test order.
This repository contains a Python-based scanner for detecting WooCommerce installations and testing for CVE-2024-45712, an unauthenticated privilege escalation vulnerability. It checks for the WooCommerce REST API, attempts version detection, and tests for vulnerability by creating a test order.
References (2)
Scores
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N