POC Details: aa27bbc159a7c6abf6218f50ce1dd86a0cef1d0d

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/alibaba-bucket-listing.yaml

Associated Vulnerability

Alibaba Cloud OSS Bucket - Public Listing Enabled Detection template

Description

Alibaba Cloud Object Storage Service (OSS) bucket is publicly accessible and allows anonymous listing of objects. This misconfiguration can expose sensitive data, lead to data breaches, and result in unexpected charges on the Alibaba Cloud bill.

File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →