POC Details: 703ba904627abb9b48d022fa9a19d722b9f27ce8

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/node-red-unauth.yaml

Associated Vulnerability

Likely 0-day

Description

Node-RED flow editor is accessible without authentication. Node-RED is a flow-based programming tool that can execute arbitrary system commands, read/write files, and make network requests. Unauthenticated access leads to remote code execution.

File Snapshot


 id: node-red-unauth

info:
  name: Node-RED - Unauthenticated Access
  author: PentesterTN
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.