跳转到帖子

recommended_posts

发布于
  • Members

D-Tale RCE

Disclosed
02/05/2025
Created
03/03/2025

Description

This exploit effectively serves as a bypass for CVE-2024-3408. An attacker can override global state to enable custom filters, which then facilitates remote code execution. Specifically, this vulnerability leverages the ability to manipulate global application settings to activate the enable_custom_filters feature, typically restricted to trusted environments. Once enabled, the /test-filter endpoint of the Custom Filters functionality can be exploited to execute arbitrary system commands.

Author(s)

  • taiphung217
  • Takahiro Yokoyama

Platform

Linux

Development

  • Source Code
  • History
  • 查看数 713
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…