← Back to projects
Cybersecurity — Exploitation
CVE-2023-43208 — Mirth Connect
HackTheBoxExploitationCVE réelle
Context
Mirth Connect (a healthcare data integration engine) is affected by a real, publicly documented CVE (CVE-2023-43208), reproduced here in a HackTheBox environment to understand its exploitation mechanics end to end.
What was done
Analyzed the vulnerability, built an exploit chain leveraging a server-side eval() injection to achieve remote code execution, then escalated privileges up to full access on the machine. The entire approach was documented step by step.
Result
Fully compromised the target machine (RCE + privesc) and wrote a detailed technical account of the exploit chain.