writeups.xyz / DoubleQlik: Bypassing the Fix for CVE-2023-41265 to Achieve Unauthenticated Remote Code Execution

Submitter : c2a

Date: 22 September 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• Path Traversal
• HTTP Request Tunneling
• HTTP Request Smuggling
• Security Code Review

Programs :

• Qlik

Authors :

• Adam Crosser

Link :
https://www.praetorian.com/blog/doubleqlik-bypassing-the-original-fix-for-cve-2023-41265/