CVE-2023-46117 (reconftw)

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities. A vulnerability has been identified in reconftw where inadequate validation of retrieved subdomains may lead to a Remote Code Execution (RCE) attack. An attacker can exploit this vulnerability by crafting a malicious CSP entry on it's own domain. Successful exploitation can lead to the execution of arbitrary code within the context of the …

attack attacker automated code code execution cve domain exploit may rce recon remote code remote code execution running scanning subdomains target tool tools validation vulnerabilities vulnerability