LRQA Nettitude PoshC2 Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in LRQA Nettitude PoshC2, specifically in the upload_file function, after commit 123db87. This vulnerability allows authenticated attackers to execute arbitrary code by sending a crafted POST request.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where PoshC2 is running.

Reproduction

To reproduce this vulnerability, an authenticated user must send a POST request to the file upload endpoint with a payload that includes a script. This script can be designed to create a reverse shell by connecting back to the attacker's machine. The uploaded file is then executed on the server, leading to remote code execution.