CVEs-PoC/2019/CVE-2019-12997.md

CVE-2019-12997

Description

In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment (aka injection in the DEFAULT_SCORE_HOST environment variable).

POC

Reference

• https://github.com/icon-project/loopchain/issues/231

Github

• https://github.com/memN0ps/memN0ps