GHSA-738q-mc72-2q22 (CVE-2023-45312)

Details

In the mtproto_proxy (aka MTProto proxy) component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secured default installation without authenticating and achieve remote command execution ability.

Affected Packages

Hexmtproto_proxy

References

ADVISORYhttps://github.com/advisories/GHSA-738q-mc72-2q22 PACKAGEhttps://github.com/seriyps/mtproto_proxy WEBhttps://medium.com/@_sadshade/almost-2000-telegram-proxy-servers-are-potentially-vulnerable-to-rce-since-2018-742a455be16b ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-45312

GHSA-738q-mc72-2q22

Details

Affected Packages

References

Aliases

CVSS Analysis

Related

Ecosystems

Timeline