LelioCosta/FLUIG-Vulnerabilidade-CVE-2023-6275

GitHubRepository PoCWriteup

PoC files

1 file

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

GitHub
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

A Markdown writeup describing CVE-2023-6275, a reflected XSS vulnerability in TOTVS Fluig Platform. It details affected versions, attack vectors, and example payloads, but contains no executable exploit or scanner code.

Backdoor review

No backdoor observed in reviewed code

The artifact is a single README.md file that documents CVE-2023-6275, a reflected XSS vulnerability in TOTVS Fluig Platform. It contains no executable code, no concealed payload, and no instructions for the reviewer to perform any action. The content is purely informational disclosure of a known vulnerability.

ClassificationWriteup
Model confidence95%
AuthenticationUnknown
LanguagesMarkdown
Target softwareTOTVS Fluig Platform
Attack typesCross-Site Scripting (XSS)
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact is a single README.md file containing a textual description of CVE-2023-6275, including affected versions, attack vectors, and example payloads. It does not contain any executable code, scripts, or automated logic to exploit or scan for the vulnerability. The content is purely informational, fitting the definition of a writeup.

README.md:1-23

Requirements

  • Target must be running a vulnerable version of TOTVS Fluig Platform (1.6.x to 1.8.1).README.md:5-6
  • Victim must interact with a crafted link containing a malicious payload in the redirectUrl or user parameter.README.md:15-17

Observed behavior

  • The writeup documents the vulnerable endpoint /mobileredir/openApp.jsp and provides example XSS payloads for the redirectUrl and user parameters.README.md:15-20
  • The writeup references external sources (NVD, VulDB) for vulnerability details and states that a public exploit is known.README.md:2-3README.md:22-23
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Vulnerability Disclosure
CVE-2023-6275 reflected XSS in TOTVS Fluig Platform mobileredir moduleThe README describes a known XSS vulnerability with example payloads and affected versions, consistent with public CVE records.README.md:1-23
Review boundaries

What the analysis did not establish

  • Evidence consists of a single Markdown file; no executable source code, scripts, or binaries are present.
  • The writeup mentions a public exploit but does not include it; the artifact itself is not an exploit or scanner.
  • Only the README.md file was provided; no other repository files were included for review. The analysis scope confirms no executable source code was identified in the artifact.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1