Description
NextGen Mirth Connect是用Java语言实现的 HL7 标准的接口网关，它是一个开源、跨平台的接口集成引擎。CVE-2023-43208 中攻击者可在无需登陆的情况下构造恶意请求造成远程代码执行漏洞，控制服务器。
NextGen Mirth Connect 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-43208
https://horizon3.ai/attack-research/disclosures/nextgen-mirth-connect-remote-code-execution/
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/NextGen/NextGen-Mirth-Connect-XStream%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2023-43208).md
https://zhuanlan.zhihu.com/p/688765948
https://avd.aliyun.com/detail?id=AVD-2023-43208
https://www.anquanke.com/post/id/291053
https://www.huntress.com/threat-library/vulnerabilities/cve-2023-43208
https://www.horizon3.ai/attack-research/disclosures/writeup-for-cve-2023-43208-nextgen-mirth-connect-pre-auth-rce/
https://fortiguard.fortinet.com/threat-signal-report/5460
https://vsociety.medium.com/rce-in-mirth-connect-pt-i-cve-2023-37679-2452b864c166