VULNERABILITY INTELLIGENCE
CVE-2024-45256
CVSS score9.8 CRITICAL
EPSS probability5.63%
CISA KEVNot currently listed
Published2024-08-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api/files/routes.py.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22