Description
CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.
Unscored
CVE-2022-23317
EUVD-2022-28399GHSA-rcvm-rqrr-gf3r
CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant informati…
Published Feb 15, 2022 · Updated Aug 3, 2024 · Assigned by mitre