## https://sploitus.com/exploit?id=D861C48B-8F4A-5934-8D18-DF7EB697B8DC
# Palo Alto Expedition (CVE-2024-5910): Missing Authentication Leads to Admin Account Takeover
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
## Affected versions
From 1.2.0 (including) to 1.2.92 (excluding)
## Prerequisites
Before running the script, make sure you have:
- Python 3.x installed on your system.
- And run `pip install -r requirements.txt` to make sure the depndecies are satisfied.
## Usage
### Basic Example (Command Injection)
```bash
python3 CVE-2024-5910.py -u https://target.com
```
## Disclaimer
This project is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage caused by this tool.
## License
This project is licensed under the MIT License.