druid-monitor: Alibaba Druid Monitor Unauthorized Access

日期: 2025-08-01 | 影响软件: druid-monitor | POC: 已公开

漏洞描述

Alibaba Druid Monitor is exposed.

PoC代码[已公开]

id: druid-monitor

info:
  name: Alibaba Druid Monitor Unauthorized Access
  author: ohlinge
  severity: high
  description: Alibaba Druid Monitor is exposed.
  metadata:
    max-request: 1
  tags: druid,alibaba,unauth,misconfig,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/druid/index.html"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'Druid Stat Index</title>'

      - type: status
        status:
          - 200
# digest: 4a0a004730450220646c64937d2a6eb59f0ff1f8909324b4c6f6ed4af9d4e18581664b3e7295fc07022100963e41611fa63e1abdbe77972a377f8991fae07a7a57eb97ed8fcc10352f7ecc:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/druid-monitor.yaml