漏洞描述
NextGen Mirth Connect是用Java语言实现的 HL7 标准的接口网关，它是一个开源、跨平台的接口集成引擎。CVE-2023-43208 中攻击者可在无需登陆的情况下构造恶意请求造成远程代码执行漏洞，控制服务器。
Mirth Connect /api/users 反序列化远程代码执行漏洞 （CVE-2023-43208）
PoC代码
暂无相关漏洞推荐
- (CVE-2025-62712) JumpServer ConnectionToken 权限验证不当漏洞
- CVE-2019-11510: Pulse Connect Secure SSL VPN Arbitrary File Read
- Ivanti Pulse Connect Secure VPN /dana-na/auth/saml-sso.cgi XML 外部实体注入漏洞（CVE-2024-22024）
- WordPress InstaWP Connect 插件 / rest_route 文件上传漏洞（CVE-2024-2667）
- Oracle PeopleSoft /PSIGW/PeopleSoftServiceListeningConnector XML 外部实体注入漏洞（CVE-2017-3548）
- POC CVE-2025-22457: Ivanti Connect Secure - Stack-based Buffer Overflow
- POC CVE-2017-17043: WordPress Emag Marketplace Connector 1.0 - Cross-Site Scripting
- POC CVE-2018-11759: Apache Tomcat JK Connect <=1.2.44 - Manager Access
- POC CVE-2019-11510: Pulse Connect Secure SSL VPN Arbitrary File Read
- POC CVE-2020-15505: MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution
- POC CVE-2021-20123: Draytek VigorConnect 1.6.0-B - Local File Inclusion
- POC CVE-2021-20124: Draytek VigorConnect 6.0-B3 - Local File Inclusion
- POC CVE-2021-24214: WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting