CVE-2025-27210 PoC — Node.js 路径遍历漏洞

Source

https://github.com/mindeddu/Vulnerable-CVE-2025-27210

Associated Vulnerability

Title:Node.js 路径遍历漏洞 (CVE-2025-27210)
Description:Node.js是Node.js开源的一个开源、跨平台的 JavaScript 运行时环境。 Node.js存在安全漏洞，该漏洞源于在攻击者发送恶意 URL 的情况下，系统可能无法正确处理设备名称，导致路径遍历。

Description

2 web apps vulnerable to CVE-2025-27210

File Snapshot


 [4.0K]  /data/pocs/127eba5d4e3698b8fe53f64b2e989171ef9bfb3d
├── [4.0K]  App_CVE-2025-27210
│   ├── [5.9K]  CVE-2025-27210_mod.py
│   ├── [5.7K]  CVE-2025-27210.py
│   ├── [ 283]  package.json
│   ├── [4.0K]  public
│   │   └── [ 758]  styles.css
│   ├── [5.9K]  server.js
│   └── [4.0K]  views
│       └── [3.0K]  index.ejs
└── [4.0K]  App_CVE-2025-27210_bis
    ├── [2.7K]  app.js
    ├── [5.9K]  CVE-2025-27210_mod.py
    ├── [ 283]  package.json
    └── [4.0K]  public
        └── [   0]  test

5 directories, 10 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!