AstrBot<=3.5.17在源码中硬编码了JWT secret，导致可以任意上传插件，实现RCE
python main.py 'http://127.0.0.1:6185'https://github.com/AstrBotDevs/AstrBot.git
-
Notifications
You must be signed in to change notification settings - Fork 3
Marven11/CVE-2025-55449-AstrBot-RCE
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
AstrBot老版本RCE
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published