CVE-2025-1302 PoC — JSONPath Plus 安全漏洞

Source

https://github.com/EQSTLab/CVE-2025-1302

Associated Vulnerability

Title:JSONPath Plus 安全漏洞 (CVE-2025-1302)
Description:JSONPath Plus是JSONPath Plus开源的一个库。 JSONPath Plus 10.3.0之前版本存在安全漏洞，该漏洞源于存在输入净化不当及不安全默认模式，会导致远程代码执行。

Description

JSONPath-plus Remote Code Execution

Readme

# CVE-2025-1302
JSONPath-plus Remote Code Execution

File Snapshot


 [4.0K]  /data/pocs/edcc7010099857c0b19ef844b9dc1897b7ea628f
├── [7.1K]  CVE-2025-1302.py
├── [ 395]  Dockerfile
├── [ 332]  package.json
├── [4.0K]  public
│   ├── [4.0K]  css
│   │   └── [3.3K]  index.css
│   ├── [ 984]  index.html
│   ├── [4.0K]  js
│   │   └── [3.8K]  index.js
│   └── [4.0K]  PNG
│       ├── [406K]  character10.png
│       ├── [387K]  character11.png
│       ├── [398K]  character12.png
│       ├── [157K]  character13.png
│       ├── [ 16K]  character1.png
│       ├── [412K]  character2.png
│       ├── [255K]  character3.png
│       ├── [317K]  character4.png
│       ├── [266K]  character5.png
│       ├── [318K]  character6.png
│       ├── [419K]  character7.png
│       ├── [306K]  character8.png
│       └── [418K]  character9.png
├── [  52]  README.md
├── [  25]  requirements.txt
└── [1.6K]  server.js

4 directories, 22 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!