Exploit for Path Traversal in Icinga Icinga_Web_2

githubexploit · 2023-03-20

Description

Path Traversal Exploit in Icinga Web 2

Affected Icinga Icinga Web 2 versions

Icinga Icinga Web 2< 2.8.6, 2.9.6

All known vulnerabilities by product

Debian Icinga Web 2

CVSS 8.8 for CVE-2022-24715

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:LOW

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

14.7%higher than 96.2% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2023-07-17 19:37

Last Seen:2025-08-31 21:34

Reporter:JacobEbben

Repository:No longer on GitHub

Tags

icinga web 2path traversalCVE-2022-24715authenticatedremote code executionsecurity audit

Other exploits for CVE-2022-24715

CVE-2022-24715-go

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

2026-09-05 KitPloitKITPLOIT

Icinga Web 2.10 Remote Code Execution

2023-07-17 Dante CoronaPACKETSTORMPython

Icinga Web 2.10 - Authenticated Remote Code Execution Exploit

2023-07-15 Dante CoronaZDTPython

Icinga Web 2.10 - Authenticated Remote Code Execution

2023-07-15 Dante CoronaEXPLOITDBPython

Exploit for Path Traversal in Icinga Icinga_Web_2

2023-07-08 cxdxntGITHUB

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=522052A8-790A-5D6C-AA79-F2E562485C4E
# CVE-2022-24715
Icinga Web 2 - Authenticated Remote Code Execution &lt;2.8.6, &lt;2.9.6, &lt;2.10

DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit.