CVE-2019-18818 PoC — strapi 授权问题漏洞

Source

https://github.com/rasyidfox/CVE-2019-18818

Associated Vulnerability

Title:strapi 授权问题漏洞 (CVE-2019-18818)
Description:strapi是一套开源的无头内容管理系统（CMS）。 strapi 3.0.0-beta.17.5之前版本中存在安全漏洞，该漏洞源于程序没有正确处理packages/strapi-admin/controllers/Auth.js和packages/strapi-plugin-users-permissions/controllers/Auth.js文件中的密码重置。目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。

Readme

# CVE-2019-18818

Usage : <admin_email> url <new_password>

# Reference :

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18818
https://thatsn0tmysite.wordpress.com/2019/11/15/x05/

File Snapshot


 [4.0K]  /data/pocs/b6549e0c27df441719a33befd69c62d7e4ed6b1c
├── [ 892]  exploit.py
└── [ 190]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!