Security Advisory

CVE-2022-23317

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-15 12:53:17
Last updated 2024-08-03 03:36:20
Assigner mitre
State PUBLISHED

Description

CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.