CVE-2025-59341 PoC — esm.sh 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59341.yaml

Associated Vulnerability

Title:esm.sh 安全漏洞 (CVE-2025-59341)
Description:esm.sh是esm.sh开源的一个内容分发网络。 esm.sh 136及之前版本存在安全漏洞，该漏洞源于服务URL处理不当，可能导致本地文件包含攻击。

Description

esm.sh <= 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request.

File Snapshot


 id: CVE-2025-59341

info:
  name: esm.sh <= v136 - Local File Inclusion
  author: 0x_Akoko
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.