Description
ShareFile是一种安全的内容协作，文件共享和同步解决方案，可支持所有以文档为中心的任务以及小型和大型企业的工作流程需求。CVE-2023-24489中，攻击者可构造恶意请求，上传文件，造成远程代码执行。
Citrix Sharefile upload.aspx 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zone.ci/aliyun/ali_nvd/25964.html
https://www.assetnote.io/resources/research/encrypted-doesnt-mean-authenticated-sharefile-rce-cve-2023-24489/
https://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489
https://research.splunk.com/stories/citrix_sharefile_rce_cve-2023-24489/
https://cn-sec.com/archives/1872963.html
https://code-white.com/blog/2021-09-citrix-sharefile-rce-cve-2021-22941/
https://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-citrix-sharefile-flaw-exploited-in-the-wild/
https://blog.assetnote.io/2023/07/04/citrix-sharefile-rce/
https://nvd.nist.gov/vuln/detail/CVE-2023-24489
https://y4er.com/posts/citrix-sharefile-cve-2021-22941-rce/