Metabase Pre-auth RCE | CVE-2023-38646 |

Поделиться
HTML-код
  • Опубликовано: 3 янв 2025

Комментарии • 10

  • @kkni-mz6de
    @kkni-mz6de Год назад +1

    I wondered if the last 'key' I got was the 'password' I used to log in? because I'm a beginner and I'm still learning

  • @ba6411
    @ba6411 Год назад

    Is this still working? I'm never tring to use this. As a CS student, I'm wondering if this vulnerability is patched, or still working.

    • @0xRobiul
      @0xRobiul  Год назад

      Yes It Work's On Some Specific Version, And The Patch Already Released!

    • @ba6411
      @ba6411 Год назад

      @@0xRobiul As long as I know, the fundamental problem is remaining "setup token" even after installation. Can the patch fix the problem with metabase instances that already installed?

    • @0xRobiul
      @0xRobiul  Год назад

      Upgrade Metabase, For More Info Check: www.metabase.com/blog/security-advisory

    • @ba6411
      @ba6411 Год назад

      @@0xRobiul Thank you for your kind reply, I really hope your channel become popular. Have a nice day. :)

    • @0xRobiul
      @0xRobiul  Год назад

      Thanks!!🔥

  • @AhrimanSefid
    @AhrimanSefid Год назад

    can make other shell file upload?

    • @0xRobiul
      @0xRobiul  Год назад

      Yes, But Unethical!!

    • @AhrimanSefid
      @AhrimanSefid Год назад

      @@0xRobiul only add command thanks