CVEs-PoC/2020/CVE-2020-24567.md

CVE-2020-24567

Description

** DISPUTED ** voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the installation directory, which may be considered a site-specific configuration error.

POC

Reference

• https://www.cymaera.com/articles/everything.html

Github

No PoCs found on GitHub currently.