https://blog.msnieman.com/tags/cve-2022-38580/Recent content in CVE-2022-38580 on Myles Nieman — BlogHugoen-usTue, 20 Aug 2024 00:00:00 +0000https://blog.msnieman.com/writeups/lantern/Tue, 20 Aug 2024 00:00:00 +0000https://blog.msnieman.com/writeups/lantern/A Skipper proxy CVE-2022-38580 SSRF exposes an internal Blazor WebAssembly app whose DLL contains base64-encoded admin credentials; those credentials log into the app, whose source code reveals a path traversal on /PrivacyAndPolicy and a DLL-loading component endpoint; a crafted Blazor component DLL reads tomas’s SSH private key, and procmon-based inspection of a root-run binary leads to privilege escalation.