writeups.xyz / CreateRCE — Yet Another Vulnerability in CreateUri

Submitter : c2a

Date: 12 April 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Parsing Issue

Programs :

• Microsoft (Windows)

Authors :

• Ben Barnea (@Nachoskrnl)

Link :
https://www.akamai.com/blog/security-research/2024/apr/critical-vulnerability-create-uri-remote-code-execution