Collected research

Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)

Finds an unauthenticated ShareFile upload path whose encrypted folder identifier lacks integrity protection. CBC ciphertext manipulation produces valid padding, satisfying the endpoint's nonempty check; an upload-ID path traversal then writes an ASPX web shell for remote code execution.

Record

Published by

slcyber.io

In the archive

• Collected in the 2023 research round

Tags

• crypto
• file-upload
• path-traversal
• rce
• auth-bypass
• cve
• attack-chain
• owasp-a01-2021
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of slcyber.io, first published at the original source. Preserved copies are kept so the citation survives its host.