exploit/linux/local/sudoedit_bypass_priv_esc

weaponized

Sudoedit Extra Arguments Priv Esc

view exploit source metasploittype exploitpublished 2023-01-18catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-22809US	high7.8	55.4% (99th)	Exploit	2023-01-18
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a lo…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.