Nuxt 代码注入漏洞(CVE-2023-3224)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-3224
• https://github.com/advisories/GHSA-gc34-5v43-h7v8
• https://cn-sec.com/archives/1808562.html
• https://y4er.com/posts/cve-2023-3224-nuxt-dev-mode-rce/
• https://github.com/nuxt/nuxt/commit/65a8f4eb3ef1b249a95fd59e323835a96428baff
• https://huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87
• https://zone.huoxian.cn/d/2795-cve-2023-3224-nuxtjs-343-dev
• https://www.secrss.com/articles/55655
• https://vulners.com/cve/CVE-2023-3224
• https://avd.aquasec.com/nvd/2023/cve-2023-3224/

Related Vulnerabilities

• Nuxt.js /__nuxt_component_test__ 代码执行漏洞（CVE-2023-3224）
• PoCnuxtjs-config-file: Nuxtjs Config File - File Disclosure
• PoCnuxt-js-lfi: Arbitrary File Read in Dev Mode - Nuxt.js
• PoCnuxt-js-semi-lfi: Semi Arbitrary File Read in Dev Mode - Nuxt.js
• PoCnuxt-js-xss: Nuxt.js Error Page - Cross-Site Scripting
• Nuxt CVE-2023-3224 远程代码执行漏洞