AhnLab EPP Management NoSQL注入漏洞(CVE-2025-60357)及POC

漏洞概述 漏洞名称: CVE-2025-60357 - NoSQL(MongoDB) Injection 描述: 在AhnLab EPP Management的 端点中发现了NoSQL注入漏洞。攻击者可以通过构造特定的MongoDB查询来提取敏感信息和PII。 发现日期: 2024年5月24日 漏洞类型: NoSQL注入 影响范围 受影响版本: v1.0.14.32-6249 及更早版本 修复版本: P14.32 > P16.25（2024年8月发布） 厂商: AhnLab 产品: AhnLab EPP Management 修复方案 已修复: AhnLab已发布补丁版本（P14.32 > P16.25），建议用户尽快更新到最新版本。 POC代码 响应示例 任意请求示例 响应示例 ```http HTTP/1.1 200 strict-transport-security: max-age=0 x-frame-options: DENY x-content-type-options: nosniff content-type: application/json;charset=utf-8 content-length: 4516 date: Wed, 24 Apr 2024 19:52:13 GMT cache-control: no-cache,no-store,no-control connection: close {"error_code":"EPP-00000","error_msg":"success","revision":1,"response":[{"_id":{"timestamp":1713945876,"counter":150472182,"machineIdentifier":9144885,"processIdentifier":22160,"timeSecond":1713945876,"time":1713945876000,"date":1713945876000},"client_time":1713946136082,"node_id":2914,"ip":"Reacted.Reactd.Reactd","computer_name":"timwarp-k03","login_id":"Reacted","user_name":null,"mac":"40-ef-0e-c5-13-37","department":{"group":"Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","Reacted","React

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

AhnLab EPP Management NoSQL注入漏洞(CVE-2025-60357)及POC

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

AhnLab EPP Management NoSQL注入漏洞(CVE-2025-60357)及POC

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！