2024-06-05

ProjectDiscovery Interactsh - Files or Directories Accessible to External Parties

ZUSOART ID

ZA-2024-01

CVE ID

CVE-2024-5262

Vulnerability Type

CWE-552: Files or Directories Accessible to External Parties

CVSS 4.0 Base

9.3

Description

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login.

Vendor

ProjectDiscovery

Product