neo4j-browser: Neo4j Browser - Detect

日期: 2025-09-01 | 影响软件: Neo4j Browser | POC: 已公开

漏洞描述

The Neo4j Browser has been detected. CVE-2021-34371 -> Neo4j 3.4及之前的版本存在远程代码执行漏洞。该漏洞源于Neo4j 3.5之前的版本依赖于一个存在远程代码执行漏洞的库(rhino 1.7.9)。当shell服务器开启时，攻击者可通过构造和序列化恶意的Java对象，从shell服务器实现远程代码执行。 Fofa: title="Neo4j Browser" Shodan: http.title:"Neo4j Browser"

PoC代码[已公开]

id: neo4j-browser

info:
  name: Neo4j Browser - Detect
  author: DhiyaneshDK
  severity: info
  verified: true
  description: |-
    The Neo4j Browser has been detected.
    CVE-2021-34371 -> Neo4j 3.4及之前的版本存在远程代码执行漏洞。该漏洞源于Neo4j 3.5之前的版本依赖于一个存在远程代码执行漏洞的库(rhino 1.7.9)。当shell服务器开启时，攻击者可通过构造和序列化恶意的Java对象，从shell服务器实现远程代码执行。
    Fofa: title="Neo4j Browser"
    Shodan: http.title:"Neo4j Browser"
  tags: neo4j,exposure,unauth,panel
  created: 2023/12/20

rules:
  r0:
    request:
      method: GET
      path: /browser
      follow_redirects: true
    expression: response.status == 200 && response.body.ibcontains(b'<title>Neo4j Browser</title>')
expression: r0()
来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/fingerprinting/neo4j-browser.yaml

相关漏洞推荐