Provide server v.14.4 xss csrf & remote code execution (rce) Vulnerability / Exploit

  /     /     /  

Exploits / Vulnerability Discovered : 2023-04-05 | Type : webapps | Platform : multiple
This exploit / vulnerability Provide server v.14.4 xss csrf & remote code execution (rce) is for educational purposes only and if it is used you will do on your own risk!


[+] Code ...

# Exploit Title: Provide Server v.14.4 XSS - CSRF & Remote Code Execution (RCE)
# Date: 2023-02-10
# Exploit Author: Andreas Finstad
# Version: < 14.4.1.29
# Tested on: Windows Server 2022
# CVE : CVE-2023-23286
POC:

https://f20.be/blog/provide-server-14-4