CasaOS Zerotier ID 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2022-24193
• https://github.com/advisories/GHSA-jh63-28gx-7p26
• https://www.cnvd.org.cn/flaw/show/CNVD-2023-94075
• https://www.nsfocus.net/vulndb/86264
• https://nvd.nist.gov/vuln/detail/CVE-2022-24193

Related Vulnerabilities

• PoCCVE-2023-37265: CasaOS < 0.4.4 - Authentication Bypass via Internal IP
• PoCCVE-2023-37266: CasaOS < 0.4.4 - Authentication Bypass via Random JWT Token
• CasaOS 命令注入漏洞(CVE-2023-37469)
• CasaOS < 0.4.4 逻辑漏洞(CVE-2023-37266)
• CasaOS < 0.4.4 信息泄露(CVE-2023-37265)