CVE-2023-1362 PoC — bumsys 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1362.yaml

Associated Vulnerability

Title:bumsys 安全漏洞 (CVE-2023-1362)
Description:bumsys是unilogies个人开发者的一个名为 Business Management System 的开源项目。 unilogies bumsys v2.0.2 之前版本存在安全漏洞，该漏洞源于该软件渲染的 UI 层或框架的不当限制。

Description

This template checks for the presence of clickjacking prevention headers in the HTTP response, aiming to identify vulnerabilities related to the improper restriction of rendered UI layers or frames in the GitHub repository unilogies/bumsys prior to version 2.0.2.

File Snapshot


 id: CVE-2023-1362

info:
  name: unilogies/bumsys < v2.0.2 - Clickjacking
  author: ctflearner
  sev

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!