CVE-2024-28397
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
50Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 5.3epss 4.8%
da publicação à armano mesmo dia
Publicada no NVD20 de jun.
1ª PoC19 de jun.
metasploit+130d
An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
n/a · n/aPoCs públicas encontradas — 20
exploitdbwww.exploit-db.com/exploits/52532não verificadogithubgithub.com/Marven11/CVE-2024-28397-js2py-Sandbox-Escape★ 73githubgithub.com/naclapor/CVE-2024-28397★ 12githubgithub.com/GhostOverflow/CVE-2024-28397-command-execution-poc★ 5githubgithub.com/xeloxa/CVE-2024-28397-Js2Py-RCE-Exploit★ 2githubgithub.com/L1337Xi/CVE-2024-28397-Exploit-Automation★ 2githubgithub.com/RianJuniorSf/exploit-js2py★ 1githubgithub.com/releaseown/exploit-js2py★ 1githubgithub.com/somisec/CVE-2024-28397-Reverse-Shell★ 1githubgithub.com/harutomo-jp/CVE-2024-28397-RCE★ 1githubgithub.com/Naved124/CVE-2024-28397-js2py-Sandbox-Escape★ 1githubgithub.com/s0m1s0ng/CVE-2024-28397-Reverse-Shell★ 1githubgithub.com/vitaciminIPI/CVE-2024-28397-RCE★ 0githubgithub.com/CYBER-WARRIOR-SEC/CVE-2024-28397-js2py-Sandbox-Escape★ 0githubgithub.com/D3ltaFormation/CVE-2024-28397-Js2Py-RCE★ 0githubgithub.com/3z-p0wn/CVE-2024-28397-exploit★ 0githubgithub.com/ExtremeUday/Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-★ 0githubgithub.com/Udayveer17/Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-★ 0githubgithub.com/0xDTC/js2py-Sandbox-Escape-CVE-2024-28397-RCE★ 0githubgithub.com/y0naldez/CVE-2024-28397-Js2Py-RCE★ 0⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.