← Database

CVE-2022-23317

HIGH CVSS: 7.5 Published: 2022-02-15 Modified: 2026-06-17

Description

CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.

Affected Platforms

Helpsystems Cobalt Strike

Weakness Type

CWE-287

References