CasaOS 命令注入漏洞(CVE-2023-37469)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-37469
• https://github.com/advisories/GHSA-92vc-4fcw-g68q
• https://securitylab.github.com/advisories/GHSL-2022-119_CasaOS/
• https://avd.aliyun.com/detail?id=AVD-2023-37469
• https://cve.imfht.com/detail/CVE-2023-37469
• https://www.nsfocus.net/vulndb/86264
• https://vulners.com/cve/CVE-2023-37469
• https://vuldb.com/?id.237930
• https://advisories.gitlab.com/pkg/golang/github.com/icewhaletech/casaos/CVE-2023-37469/
• https://www.tenable.com/cve/CVE-2023-37469

Related Vulnerabilities

• PoCCVE-2023-37265: CasaOS < 0.4.4 - Authentication Bypass via Internal IP
• PoCCVE-2023-37266: CasaOS < 0.4.4 - Authentication Bypass via Random JWT Token
• CasaOS Zerotier ID 命令注入漏洞
• CasaOS < 0.4.4 逻辑漏洞(CVE-2023-37266)
• CasaOS < 0.4.4 信息泄露(CVE-2023-37265)