{"id":21770023,"url":"https://github.com/theunknownsoul/cve-2024-7808","last_synced_at":"2026-01-31T06:03:34.749Z","repository":{"id":261749901,"uuid":"884904353","full_name":"TheUnknownSoul/CVE-2024-7808","owner":"TheUnknownSoul","description":"RCE  exploit for low privileged user via CSRF in open-webui ","archived":false,"fork":false,"pushed_at":"2024-11-08T10:08:07.000Z","size":5,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-06-15T15:55:26.037Z","etag":null,"topics":["csrf","hack-tool","open-webui","rce-exploit"],"latest_commit_sha":null,"homepage":"","language":"HTML","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TheUnknownSoul.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-11-07T15:42:53.000Z","updated_at":"2025-06-15T15:00:59.000Z","dependencies_parsed_at":"2024-11-08T08:32:18.370Z","dependency_job_id":"97771376-b620-4c1d-adc5-f430b8164230","html_url":"https://github.com/TheUnknownSoul/CVE-2024-7808","commit_stats":null,"previous_names":["theunknownsoul/cve-2024-7808"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/TheUnknownSoul/CVE-2024-7808","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2FCVE-2024-7808","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2FCVE-2024-7808/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2FCVE-2024-7808/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2FCVE-2024-7808/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TheUnknownSoul","download_url":"https://codeload.github.com/TheUnknownSoul/CVE-2024-7808/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TheUnknownSoul%2FCVE-2024-7808/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28931077,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-31T04:05:25.756Z","status":"ssl_error","status_checked_at":"2026-01-31T04:02:35.005Z","response_time":128,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["csrf","hack-tool","open-webui","rce-exploit"],"created_at":"2024-11-26T14:11:02.339Z","updated_at":"2026-01-31T06:03:34.731Z","avatar_url":"https://github.com/TheUnknownSoul.png","language":"HTML","funding_links":[],"categories":[],"sub_categories":[],"readme":"# CVE-2024-7808 :skull:\n $${\\color{red} THIS \\space EXPLOIT \\space MAY \\space VIOLATE \\space THE \\space LAW.}$$ \n $${\\color{red}\\space YOU \\space ARE \\space RESPONSIBLE  \\space FOR \\space YOUR \\space ACTIONS.}$$ \n $${\\color{red}DEMONSTRATION \\space PURPOSE \\space ONLY.}$$\n\n## DESCRIPTION\n\n[RCE by Non-Admin Users via CSRF in open-webui](https://huntr.com/bounties/9350a68d-5f33-4b3d-988b-81e778160ab8) which\nallow attacker to send malicious HTML document with build-in javascript that will upload and execute file contains revers \nshell.\n\nBefore main stage script starts web server to give HTML document with multipart form data submission  and netcat listener. \nNext, upload document to the vulnerable site and on page load event javascript  will upload file contains python revers \nshell. If everything is fine you'll receive revers shell in the terminal. Also, if directory listing is \nvisible you can visit page and try to manually check file uploading process and debug.\n\n## Preparation\n1. Clone project\n```git clone https://github.com/theUnknownSoul/CVE-2024-7806```\n2. Change rights for ```install.sh``` script and run from root to install all necessary system dependencies\nand rights.\n3. Change port for web server and netcat listener in ```serve.sh``` script if needed.\n4. Change IP and server port for reverse shell in a ```non_suspicious_file.py```. \n5. Install python dependencies with ``` pip install -r requirements.txt```\n\n## Usage\n```\npython CVE-2024-7806.py -u \u003ctarget url\u003e\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftheunknownsoul%2Fcve-2024-7808","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftheunknownsoul%2Fcve-2024-7808","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftheunknownsoul%2Fcve-2024-7808/lists"}