来源

关联漏洞

描述

PoC for CVE-2024-45058 Broken Access Control, allowing any user with view permission in the user configuration section to become an administrator changing their own user type.

介绍

# CVE-2024-45058
PoC for CVE-2024-45058 Broken Access Control, allowing any user with view permission in the user configuration section to become an administrator changing their own user type. 

Grab the desired nivel_usuario_ ID and run the exploit.

# Usage
```
usage: CVE-2024-45058.py [-h] -t TARGET -u USERNAME -p PASSWORD -i ID

CVE-2024-45058 exploit

options:
  -h, --help            show this help message and exit
  -t TARGET, --target TARGET
                        Vulnerable target
  -u USERNAME, --username USERNAME
                        Account username
  -p PASSWORD, --password PASSWORD
                        Account password
  -i ID, --id ID        nivel_usuario_ ID to be set
```

文件快照

 [4.0K]  /data/pocs/dc4d3b372f4543a24336c08702d729134d645276
├── [2.2K]  CVE-2024-45058.py
├── [ 703]  README.md
└── [  12]  requirements.txt

0 directories, 3 files

备注