Nuclei v2.5.2 - First Security Release
projectdiscovery.io | vulnerability | #bug-bounty
Summary
We'd like to thank @c3l3si4n for disclosing the first security vulnerability that affects nuclei. This blog describes a brief overview of the security issue/impact and the measures we took to address it. Issue Summary The nuclei engine has a code execution vulnerability using components with known vulnerabilities that can be exploited by utilizing a specially crafted headless based template. Root Cause Nuclei relies on the go-rod library for a high level browser driver to run templates tha
- Published
- Collected
--- id: 9335 title: "Nuclei v2.5.2 - First Security Release" source_domain: projectdiscovery.io source_url: "https://projectdiscovery.io/blog/nuclei-v2-5-2-release" published_at: "2021-09-20T18:52:40Z" tags: ["bug-bounty"] phying_url: "https://phying.com/item/9335" lang: en --- # Nuclei v2.5.2 - First Security Release ## Summary We'd like to thank @c3l3si4n for disclosing the first security vulnerability that affects nuclei. This blog describes a brief overview of the security issue/impact and the measures we took to address it. Issue Summary The nuclei engine has a code execution vulnerability using components with known vulnerabilities that can be exploited by utilizing a specially crafted headless based template. Root Cause Nuclei relies on the go-rod library for a high level browser driver to run templates tha ## Intelligence Metadata - **Sources:** projectdiscovery.io - **Published:** 2021-09-20T18:52:40Z - **Original:** https://projectdiscovery.io/blog/nuclei-v2-5-2-release - **Phying News:** https://phying.com/item/9335