CVE-2024-53995 PoC — SickChill 输入验证错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53995.yaml

Associated Vulnerability

Title:SickChill 输入验证错误漏洞 (CVE-2024-53995)
Description:SickChill是SickChill开源的一个应用程序。 SickChill存在输入验证错误漏洞，该漏洞源于用户控制的登录端点中next_参数可接收任意内容，经过身份验证的攻击者可利用此漏洞将用户重定向到任意目标，从而导致开放重定向。

Description

SickChill's login endpoint's 'next_' parameter accepts arbitrary content, allowing authenticated attackers to perform open redirects, but this was fixed in commit c7128a8946c3701df95c285810eb75b2de18bf82 by redirecting to a default page.

File Snapshot


 id: CVE-2024-53995

info:
  name: SickChill - Open Redirect
  author: omarkurt
  severity: low
  des

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!