The 2023 Pwnie Nominee For Best Remote Code Execution Bug

Checkmk RCE

@scryh_

The Checkmk RCE chain all starts with a limited SSRF and ends in a full-blown RCE after chaining 5 vulnerabilities. Rather uncommon in the web world!