CVE-2022-29622 PoC — formidable 代码问题漏洞

Source

https://github.com/keymandll/CVE-2022-29622

Associated Vulnerability

Title:formidable 代码问题漏洞 (CVE-2022-29622)
Description:formidable是formidable的一个用于解析表单数据的 Node.js 模块，尤其是文件上传。 formidable 3.1.4 版本存在代码问题漏洞，该漏洞源于存在任意文件上传问题。攻击者通过精心制作的文件名可以执行任意代码。

Description

Hack this service to prove CVE-2022–29622 is valid

Readme

# CVE-2022–29622: (In)vulnerability Analysis

**THIS PROJECT HAS BEEN MOVED** to GitLab here: [https://gitlab.com/Keymandll/cve-2022-29622](https://gitlab.com/Keymandll/cve-2022-29622)

This codebase was created to help security professionals and developers to understand why Formidable was not vulnerable to CVE-2022-29622.

File Snapshot


 [4.0K]  /data/pocs/61095c3aaf50b2bd25bd2ce8a447cceba439180c
└── [ 328]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!