References https://stack.chaitin.com/vuldb/detail/cb022a14-baae-40f5-8db4-c471de7e85a1 https://cve.imfht.com/detail/CVE-2023-33831 https://cn-sec.com/archives/2120955.html https://github.com/lal0ne/vulnerability/tree/main/FUXA https://qkl.seebug.org/vuldb/ssvid-99757 https://www.dptech.com/uploadfile/2023/1012/20231012032943995.pdf https://6cloudtech.com/portal/article/index/id/1180.html https://bbs.antiy.cn/thread-207881-1-1.html
Related VulnerabilitiesPoCCVE-2026-25895: FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File WritePoCCVE-2026-47717: FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data DisclosureFUXA /api/project 信息泄露漏洞(CVE-2026-47717)FUXA /socket.io 服务器端请求伪造漏洞(CVE-2026-47719)FUXA /api/runscript 代码执行漏洞(CVE-2026-43947)FUXA /api/download 文件读取漏洞(CVE-2023-31718)FUXA /api/project 权限绕过漏洞(CVE-2025-69971)PoCCVE-2025-69971: FUXA <= 1.2.7 - Hardcoded JWT Secret Authentication BypassPoCCVE-2023-33831: FUXA - Unauthenticated Remote Code ExecutionFUXA logs /api/logs 文件读取漏洞(CVE-2023-31716)FUXA /runscript 命令执行漏洞(CVE-2023-33831)