pentester.land· Dec 14, 2023· by Ron Masas (@RonMasas)🔍 CVE-2023-22524

CVE-2023-22524: RCE Vulnerability in Atlassian Companion for macOS

Open Original Article ↗
Target Program: Atlassian
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#RCE#MacOS#Websockets#Thick client#Security code review#CVE-2023-22524

More Writeups Like This

pentester.land

macOS Atlassian Companion Remote Code Execution

by Wojciech Reguła (@_r3ggi)
pentester.land

Getting code execution on Veeam through CVE-2023-27532

by Alain Mowat (@plopz0r)
pentester.land

Spip Preauth RCE 2024: Part 2, A Big Upload

by Laluka (@TheLaluka)
pentester.land

Back To School - Exploiting A Remote Code Execution Vulnerability In Moodle

by RedTeam Pentesting (@RedTeamPT)