TaroballzChen/CVE-2022-41040-metasploit-ProxyNotShell

PoC

the metasploit script(POC) about CVE-2022-41040. Microsoft Exchange are vulnerable to a server-side request forgery (SSRF) attack. An authenticated attacker can use the vulnerability to elevate privileges.

view exploit source poc_in_githubauthor TaroballzChenpublished 2022-10-20catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-41040US	—OT critical	100.0% (100th)	KEV	2022-10-03
Microsoft Exchange Server Elevation of Privilege Vulnerability

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan