POC Details: 6640b49f02278c58bd52f23f67ed40e45d7987a2

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/photoprism-unauth-exposure.yaml

Associated Vulnerability

Likely 0-day

Description

PhotoPrism instance is running in public mode with authentication disabled (PHOTOPRISM_AUTH_MODE=public), exposing all photos, albums, GPS locations, face recognition data, and server configuration to unauthenticated users.

File Snapshot


 id: photoprism-unauth-exposure

info:
  name: PhotoPrism - Unauthenticated Exposure
  author: pussyc

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.