sn0wbaall/cve-2024-23334-pocAutomated proof-of-concept exploit for CVE-2024-23334, a path traversal vulnerability in aiohttp, enabling remote directory traversal and unauthorized file access.
I created this script to automate the exploitation of CVE‑2024‑23334 on the Hack The Box Chemistry machine.
This vulnerability affects aiohttp versions ≥ 1.0.5 and < 3.9.2 when the application is configured to serve static files with follow_symlinks=True, allowing remote directory traversal and unauthorized access to arbitrary files on the server.
