CVE-2025-0401
MEDIUMreggie 1.0 - Path Traversal via CommonController Download Function
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2025-0401. PoCs published by JoasASantos, CyberSecurityUP, Darabium.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-0401, demonstrating a local privilege escalation via SUID binary abuse. The exploit uses shellcode to execute syscalls for setuid(0), setgid(0), and spawns a root shell, though it ultimately reveals itself as an April Fools' prank.
Description
A vulnerability classified as critical has been found in 1902756969 reggie 1.0. Affected is the function download of the file src/main/java/com/itheima/reggie/controller/CommonController.java. The manipulation of the argument name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Exploits (3)
This repository contains a functional exploit for CVE-2025-0401, demonstrating a local privilege escalation via SUID binary abuse. The exploit uses shellcode to execute syscalls for setuid(0), setgid(0), and spawns a root shell, though it ultimately reveals itself as an April Fools' prank.
This PoC demonstrates a local privilege escalation (LPE) via SUID binary abuse, using syscalls to setuid(0) and setgid(0) followed by spawning a root shell. However, the final output reveals it as an April Fools' prank with no actual privilege escalation.
The repository contains a bash script exploiting CVE-2025-0401 for Linux privilege escalation. The script manipulates environment variables to spawn a root shell, indicating a local privilege escalation (LPE) vulnerability.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N