CyberRota Analysis
AI-GeneratedNuclei versions prior to 3.11.1 are vulnerable due to inadequate caching of template signature verification, relying solely on file modification time without validating content checksums. This flaw allows attackers to substitute verified templates with malicious content while maintaining the original modification timestamp, potentially leading to the execution of arbitrary operating system commands. Organizations utilizing Nuclei for security assessments should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums. Attackers can replace verified templates with unsigned malicious content and restore the original modification time to bypass signature checks and execute arbitrary operating system commands.