CVE-2024-55964

EIP tracks 1 public exploit for CVE-2024-55964. PoCs published by Whit Taylor (Rhino Security Labs), Takahiro Yokoyama, including Metasploit module exploits/linux/http/appsmith_rce_cve_2024_55964.

AI-analyzed exploit summary This Metasploit module exploits an incorrectly configured PostgreSQL instance in Appsmith to achieve remote command execution inside the Docker container. It automates user signup, workspace access, and PostgreSQL plugin manipulation to execute arbitrary commands via the COPY FROM PROGRAM feature.

An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query.