Merge pull request #19705 from ostrichgolf/projectsend_rce

Add CVE to ProjectSend module
rapid7 · Dec 7, 2024 · 2421ca7 · 2421ca7
2 parents 3c9d698 + 2952dbb
commit 2421ca7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/modules/exploits/linux/http/projectsend_unauth_rce.rb b/modules/exploits/linux/http/projectsend_unauth_rce.rb
@@ -26,6 +26,7 @@ def initialize(info = {})
         'References' => [
           ['URL', 'https://github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd53317473744'],
           ['URL', 'https://www.synacktiv.com/sites/default/files/2024-07/synacktiv-projectsend-multiple-vulnerabilities.pdf'],
+          ['CVE', '2024-11680']
         ],
         'DisclosureDate' => '2024-07-19',
         'DefaultTarget' => 0,