Exploit for CVE-2024-28397-RCE

kitploit · 2026-09-12

Description

Remote code execution vulnerability in the JS2PY JavaScript to Python library.

Entry point

Parametercode · request body

Path/run_code

js2py sandbox escape via crafted JSON payload leading to RCE

All known vulnerabilities by product

CVSS 5.3 for CVE-2024-28397

5.3

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:LOW

Integrity:LOW

Availability:LOW

CVE Information

Exploit Details

Modified:2026-09-12 12:20

Last Seen:2026-09-13 03:12

Reporter:KitPloit

Tags

JS2PYRemote Code ExecutionExploit AvailablePython Exploit

Other exploits for CVE-2024-28397

CVE-2024-28397-Reverse-Shell

2026-09-13 KitPloitKITPLOIT

2026-09-13 KitPloitKITPLOIT

CVE-2024-28397-RCE

2026-09-13 KitPloitKITPLOIT

Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-

2026-09-13 KitPloitKITPLOIT

CVE-2024-28397-exploit

2026-09-12 KitPloitKITPLOIT

CVE-2024-39205-Pyload-RCE

2026-09-12 KitPloitKITPLOIT

CVE-2024-28397-js2py-Sandbox-Escape

2026-09-12 KitPloitKITPLOIT

CVE-2024-28397-Js2Py-RCE

2026-09-12 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-VITACIMINIPI-CVE-2024-28397-RCE
# CVE-2024-28397-RCE

CVE-2024-28397 — Удаленное выполнение кода из уязвимого JS2PY

Использование: python3 exploit.py