CVE-2020-24772

In Dreamacro Clash for Windows v0.11.4, an attacker could embed a malicious iframe in a website with a crafted URL that would launch the Clash Windows client and force it to open a remote SMB share. Windows will perform NTLM authentication when opening the SMB share and that request can be relayed (using a tool like responder) for code execution (or captured for hash cracking).
References
Link Resource
https://github.com/Dreamacro/clash/issues/910 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:clash_project:clash:0.11.4:*:*:*:*:windows:*:*

History

No history.

Information

Published : 2022-03-21 15:15

Updated : 2024-02-28 19:09


NVD link : CVE-2020-24772

Mitre link : CVE-2020-24772

CVE.ORG link : CVE-2020-24772


JSON object : View

Products Affected

clash_project

  • clash
CWE
CWE-346

Origin Validation Error