lottie-backdoor: Lottie Player - Backdoor

日期: 2025-08-01 | 影响软件: lottie | POC: 已公开

漏洞描述

Detectes vulnerable compormised version of lottie-player JS Library that were compormised with a Web3 wallet pop-up backdoor.

PoC代码[已公开]

id: lottie-backdoor

info:
  name: Lottie Player - Backdoor
  author: nagli-wiz
  severity: critical
  description: |
    Detectes vulnerable compormised version of lottie-player JS Library that were compormised with a Web3 wallet pop-up backdoor.
  reference:
    - https://github.com/LottieFiles/lottie-player/issues/254
    - https://x.com/galnagli/status/1851779972639363076
  tags: cdn,lottie-player,backdoor,malware,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true
    max-redirects: 1

    matchers:
      - type: word
        words:
          - 'lottie-player@2.0.5'
          - 'lottie-player@2.0.6'
          - 'lottie-player@2.0.7'
# digest: 4a0a004730450221008acfa709732b509541b39f2ece994de5e369a38a83114d0391c257b2122f7ad702206fe451b03b1eb2d011d43e7f53f53317eb18107e199fc4071bbd04a76698f049:922c64590222798bb761d5b6d8e72950

来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/backdoor/lottie-backdoor.yaml

漏洞描述

PoC代码[已公开]

相关漏洞推荐