ProjectDiscovery Interactsh - Files or Directories Accessible to External Parties

Overview

CVE-2024-5262 is a CWE-552 vulnerability (Files or Directories Accessible to External Parties) in the SMB server component of ProjectDiscovery Interactsh [3]. The SMB server, a self-hosted feature, does not properly scope the share, allowing an unauthenticated remote attacker to access files outside the intended directory [1][4]. The root cause is insufficient access controls on the SMB share path.

Exploitation

An attacker can exploit this by connecting to the victim's Interactsh SMB server with anonymous login credentials. No prior authentication or network position is required beyond network access to the server [2][3]. The attacker can then read and write files in the directory where Interactsh-server runs, as well as all subdirectories [2][3].

Impact

Successful exploitation gives the attacker arbitrary read and write access to the server's filesystem. This could lead to data exfiltration, file modification, or further compromise of the host system [3].

Mitigation

A fix has been merged in pull request #874, which provides better scoping of the SMB share to limit access to the intended directory [2][4]. Users are advised to update to the latest version of Interactsh. No workaround is provided, but self-hosted users can restrict network access to the SMB server as a temporary measure.