Back to all
2024-06-05

ProjectDiscovery Interactsh - Files or Directories Accessible to External Parties

ZUSOART ID
ZA-2024-01
CVE ID
CVE-2024-5262
Vulnerability Type
CWE-552: Files or Directories Accessible to External Parties
CVSS 4.0 Base
Description

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login.

Vendor
ProjectDiscovery
Product
Category
Version affected
Interactsh
from v0.0.6 through v1.1.9
Mitigations

Update to Interactsh server v1.2.0

Release date
2024-06-05
Credit

Tsung Ju Wu (Daniel Wu) of ZUSO ART