Nuxt CVE-2023-3224 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-3224
• https://github.com/advisories/GHSA-gc34-5v43-h7v8
• https://wxb.fzu.edu.cn/info/1015/1831.htm
• https://y4er.com/posts/cve-2023-3224-nuxt-dev-mode-rce/
• https://www.secrss.com/articles/55655
• https://zone.huoxian.cn/d/2795-cve-2023-3224-nuxtjs-343-dev
• https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=34747
• https://pentest-tools.com/vulnerabilities-exploits/nuxt-framework-remote-code-execution_27
• https://www.sentinelone.com/vulnerability-database/cve-2023-3224/
• https://avd.aliyun.com/product?prod=nuxt&page=1
• https://www.miggo.io/vulnerability-database/cve/CVE-2023-3224

Related Vulnerabilities

• Nuxt.js /__nuxt_component_test__ 代码执行漏洞（CVE-2023-3224）
• PoCnuxtjs-config-file: Nuxtjs Config File - File Disclosure
• PoCnuxt-js-lfi: Arbitrary File Read in Dev Mode - Nuxt.js
• PoCnuxt-js-semi-lfi: Semi Arbitrary File Read in Dev Mode - Nuxt.js
• PoCnuxt-js-xss: Nuxt.js Error Page - Cross-Site Scripting
• Nuxt 代码注入漏洞(CVE-2023-3224)