pentester.land· Apr 28, 2023· by Nguyễn Tiến Giang (@testanull)🔍 CVE-2023-21707

Microsoft Exchange Powershell Remoting Deserialization leading to RCE (CVE-2023-21707)

Open Original Article ↗
Target Program: Microsoft (Exchange)
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE#Insecure deserialization#CVE-2023-21707