shiomiyan / cve-2023-41080 Goto Github PK

Hello,

I hope this message finds you well. I wanted to bring up an issue related to the CVE-2023-41080 vulnerability. I've been attempting to reproduce the error using the files and repository provided, which are said to demonstrate the vulnerability using a Docker Compose setup and two images—one with the security flaw and one without.

However, I regret to inform you that I have been unsuccessful in reproducing the CVE-2023-41080 error using the provided files. I followed the instructions carefully, set up the Docker Compose environment, and tested both images. Despite my efforts, I did not encounter the vulnerability as described in the documentation.

Steps Taken:

1. Cloned the repository and reviewed the provided files.
2. Ran the Docker Compose.
3. Browser to http://localhost:8081//secret.html;@example.com
4. Browser to http://localhost:8082//secret.html;@example.com

Results:

Despite performing the above steps, I did not observe the vulnerability behavior on either of the images provided in the repository (result on step 3 and 4 ; Login page). This leads me to believe that there might be some missing steps, configurations, or additional context required to reproduce the CVE-2023-41080 error effectively.

Request for Assistance:

If there are any specific details, configurations, or additional dependencies necessary to accurately reproduce the vulnerability, please provide them. It would be greatly appreciated if you could offer guidance or assistance in this matter. I'm keen on understanding and validating the vulnerability, and your input would be invaluable.

Thank you for your time and consideration. Looking forward to your response.

Best regards,