CVE-2021-3223 PoC — Node-RED-Dashboard 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3223.yaml

Associated Vulnerability

Title:Node-RED-Dashboard 路径遍历漏洞 (CVE-2021-3223)
Description:Node-RED-Dashboard before 2.26.2 存在路径遍历漏洞，攻击者可利用该漏洞遍历路径。

Description

NodeRED-Dashboard before 2.26.2 is vulnerable to local file inclusion because it allows ui_base/js/..%2f directory traversal to read files.

File Snapshot


 id: CVE-2021-3223

info:
  name: Node RED Dashboard <2.26.2 - Local File Inclusion
  author: gy741,p

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.