cve/2024/CVE-2024-25693.md

CVE-2024-25693

Description

There is a path traversal in Esri Portal for ArcGIS versions <= 11.2. Successful exploitation may allow a remote, authenticated attacker to traverse the file system to access files or execute code outside of the intended directory. 

POC

Reference

No PoCs from references.

Github

• https://github.com/MrSecby/CVE-2024-25693-exploit
• https://github.com/awillard1/pentesting
• https://github.com/nomi-sec/PoC-in-GitHub