POC Details: 0dc1f5bf8790b373f5e2b7dd6cdcdf36fd599831

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/theia-lfi-to-rce.yaml

Associated Vulnerability

Likely 0-day

Description

Detected Eclipse Theia IDE was exposed without authentication, allowing unauthenticated attackers to access the web-based IDE with terminal capabilities, file system access, and arbitrary command execution.

File Snapshot


 id: theia-lfi-to-rce

info:
  name: Eclipse Theia IDE - LFI to RCE
  author: 0x_Akoko
  severity: cr

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.