SpiderFlow爬虫平台远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/adminlove520/pocWiki/blob/main/SpiderFlow%E7%88%AC%E8%99%AB%E5%B9%B3%E5%8F%B0%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2024-0195).md
• https://www.cnblogs.com/hetianlab/p/17973367
• https://github.com/zan8in/afrog/issues/61
• https://blog.csdn.net/zhiquovo/article/details/136546999
• https://cn-sec.com/archives/2469726.html
• https://blog.csdn.net/recotone/article/details/126656864
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/SpiderFlow-save-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md
• https://juejin.cn/post/7371019286372319247
• https://pentest-tools.com/vulnerabilities-exploits/spiderflow-crawler-platform-remote-code-execution_22682
• https://github.com/gh-ost00/CVE-2024-0195-SpiderFlow
• https://www.youtube.com/watch?v=2Gc67f-h8Kg
• https://blogs.cappriciosec.com/cve/194/SpiderFlow%20Under%20Scrutiny%20the%20Remote%20Code%20Execution%20Vulnerability%20(CVE-2024-0195)
• https://infosecwriteups.com/cve-2024-0195-improper-control-of-generation-of-code-code-injection-c292836e03ec
• https://www.sentinelone.com/vulnerability-database/cve-2024-0195/
• https://s4e.io/tools/spiderflow-remote-code-execution-cve-2024-0195
• https://www.youtube.com/watch?v=lkkresbwVmQ
• https://vuldb.com/vuln/249510
• https://feedly.com/cve/CVE-2024-0195

Related Vulnerabilities

• PoCCVE-2024-0195: SpiderFlow Crawler Platform - Remote Code Execution
• PoCspiderflow-save-rce: SpiderFlow save 远程命令执行漏洞
• SpiderFlow 未授权远程命令执行漏洞