CVE-2020-11883 PoC — Divante 信息泄露漏洞

Source

https://github.com/0ndras3k/CVE-2020-11883

Associated Vulnerability

Title: Divante 信息泄露漏洞 (CVE-2020-11883)
Description:In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.

Description

vue-storefront-api vulnerability

Readme

# CVE-2020-11883
[vue-storefront-api vulnerability](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11883)

## 🛠 Setup

```
$ yarn instal 
$ tsnd . <domain>
```

## 🧨 Examples

Message format
```
$ tsnd . <domain>
```
<p>
In this example, I tested the "Lights.ie" page.

</br>
<img src="https://raw.githubusercontent.com/0ndras3k/CVE-2020-11883/main/example.png">
</p>

# 🙀 Disclaimer
This application is for testing purposes only, I am not responsible for any problems that may arise. Please test only where you can.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →