Skip to content

securezeron/CVE-2023-38646

main
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
July 30, 2023 16:34

Metabase Pre Authentication RCE (CVE-2023-38646)

We have provided two files:-

  • CVE-2023-38646-POC.py for checking if any metabase intance is leaking setup-token.
  • CVE-2023-38646-Reverse-Shell.py to get a reerse shell on the attacker controlled machine.

CVE-2023-38646-POC.py

Check


CVE-2023-38646-Reverse-Shell.py

Reverse_Shell1


How To Use

git clone https://github.com/securezeron/CVE-2023-38646
cd CVE-2023-38646
pip install -r requirements.txt
python3 CVE-2023-38646-Reverse-Shell.py -h