.. / CVE-2021-44910

• Info Disclosure
• Nuclei
• Web

Exploit for SpringBlade - Information Leakage (CVE-2021-44910)

Description:

SpringBlade is a comprehensive project upgraded and optimized from a commercial-grade project, featuring both a SpringCloud distributed microservice architecture and a SpringBoot monolithic microservice architecture. The SpringBlade framework has a default SIGN_KEY, which can be exploited by attackers to obtain sensitive information such as user account password logs.

Nuclei Template

View the template here CVE-2021-44910.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-44910.yaml

References: