Exploit for External Control of File Name or Path in Microsoft

Vulnerability Details

Basic Information

Title Exploit for External Control of File Name or Path in Microsoft
Type githubexploit
Published 2025-04-27T06:50:48
Last Seen 2025-04-27T12:03:38
CVSS Score 6.5 (MEDIUM)

CVSS v3 Details

Attack Vector NETWORK
Attack Complexity LOW
Privileges Required NONE
User Interaction REQUIRED
Scope UNCHANGED
Confidentiality Impact HIGH
Integrity Impact NONE
Availability Impact NONE

CVE Information

CVE IDs CVE-2025-24054
CWE
Bulletin Family exploit

Description

CVE-2025-24054 PoC 🛡️ Overview Welcome to the CVE-2025-24054-PoC repository. This project provides a proof of concept for the NTLM hash leak vulnerability via the .library-ms file format, as detailed in CVE-2025-24054. This vulnerability can lead…

Impact Assessment

Base Score 6.5
Severity MEDIUM

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.