Exploit for CVE-2023-22047-Oracle-PeopleSoft-LFI

kitploit · 2026-09-05

Description

Unauthenticated LFI in Oracle PeopleSoft PeopleTools reads arbitrary files including credentials.

Entry point

Parameterwsrp-url · query param

Path/RP

Unauthenticated Local File Inclusion via wsrp-url parameter on /RP endpoint (CWE-22: Path Traversal)

Affected Oracle Peoplesoft Enterprise versions

Oracle Peoplesoft Enterprise= 8.59, 8.60

All known vulnerabilities by product

Peoplesoft Enterprise Peopletools

CVSS 7.5 for CVE-2023-22047

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

EPSS Score

77.0%higher than 99.5% of all CVEs

Updated 2026-09-11

CVE Information

References

https://github.com/0xterror/CVE-2023-22047-PoC/stargazers

https://github.com/0xterror/CVE-2023-22047-PoC/network/members

Exploit Details

Modified:2026-09-05 20:14

Last Seen:2026-09-09 03:17

Reporter:KitPloit

Tags

PeopleSoft PeopleToolsLocal File InclusionUnauthenticatedArbitrary File ReadOracle

Other exploits for CVE-2023-22047

2026-09-11 KitPloitKITPLOIT

CVE-2023-22047---Oracle-PeopleSoft-LFI

2026-09-05 KitPloitKITPLOIT

Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise

2026-08-15 0xTerrorGITHUB

Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise

2026-08-15 0xTerrorGITHUB

Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise

2025-04-02 tuo4n8GITHUB

Exploit Code

MARKDOWN12 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-0XTERROR-CVE-2023-22047-ORACLE-PEOPLESOFT-LFI
![0xTerror Logo](https://assets.kitploit.com/production/public/readmes/50242/f036bd5517ab1ec023381e336e314b53384b618d5a934600f6128bbcc120a17f.png) ![CVE Badge](https://img.shields.io/badge/CVE-2023--22047-red?style=for-the-badge&logo=security&logoColor=white) ![CVSS Score](https://img.shields.io/badge/CVSS-9.8-critical?style=for-the-badge) ![Status](https://img.shields.io/badge/Status-Exploitable-brightgreen?style=for-the-badge)

# 🚀 CVE-2023-22047 - PeopleSoft LFI Exploit

**Unauthenticated Local File Inclusion (LFI) in Oracle PeopleSoft Enterprise PeopleTools**

![GitHub stars](https://img.shields.io/github/stars/0xterror/CVE-2023-22047-PoC.svg?style=social) ![GitHub forks](https://img.shields.io/github/forks/0xterror/CVE-2023-22047-PoC.svg?style=social) ![GitHub license](https://img.shields.io/badge/license-MIT-blue.svg) ![Python](https://img.shields.io/badge/Python-3.x-blue?style=flat&logo=python)

* * *

## 👨‍💻 Author