CVE-2021-27670 PoC — Appspace 代码问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27670.yaml

Associated Vulnerability

Title:Appspace 代码问题漏洞 (CVE-2021-27670)
Description:Appspace是美国Appspace公司的一个应用软件。提供内置的内容策略轻松实施和执行团队沟通程序。 Appspace 6.2.4 存在安全漏洞，该漏洞源于api/v1/core/proxy/jsonprequest url参数。

Description

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.

File Snapshot


 id: CVE-2021-27670

info:
  name: Appspace 6.2.4 - Server-Side Request Forgery
  author: ritikchaddh

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!