Description
Hoverfly是一个为开发人员和测试人员提供的轻量级服务虚拟化/API模拟/API模拟工具。在中间件管理中存在远程命令执行漏洞
Hoverfly 远程命令执行(CVE-2025-54123)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-54123
https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-r4h8-hfp2-ggmf
https://www.sentinelone.com/vulnerability-database/cve-2025-54123/
https://pentest-tools.com/vulnerabilities-exploits/hoverfly-remote-code-execution_29145
https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSPECTOLABSHOVERFLYCORE-12671221
https://www.ameeba.com/blog/cve-2025-54123-remote-code-execution-vulnerability-in-hoverfly-api-simulation-tool/