[FALSE-NEGATIVE] CVE-2025-61882 template does not work as expected #13540
Description
Template IDs or paths
- CVE-2025-61882Environment
- OS: Ubuntu 22.04.4 LTS
- Nuclei: v3.4.10
- Go:Steps To Reproduce
I have 2 None-Production EBS instances, one is applied Oracle patches , another is not yet.
./nuclei -u https://ebs1.example.com:443 -t CVE-2025-61882.yaml
./nuclei -u http://ebs1.example.com:8000 -t CVE-2025-61882.yaml
./nuclei -u http://ebs2.example.com:8000 -t CVE-2025-61882.yaml
both got:
[INF] Scan completed in 40.467156023s. No results found.
Relevant dumped responses
__ _
____ __ _______/ /__ (_)
/ __ \/ / / / ___/ / _ \/ /
/ / / / /_/ / /__/ / __/ /
/_/ /_/\__,_/\___/_/\___/_/ v3.4.10
projectdiscovery.io
[INF] Current nuclei version: v3.4.10 (latest)
[INF] Current nuclei-templates version: v10.3.0 (latest)
[WRN] Scan results upload to cloud is disabled.
[INF] New templates added in latest release: 124
[INF] Templates loaded for current scan: 1
[WRN] Loading 1 unsigned templates for scan. Use with caution.
[INF] Targets loaded for current scan: 1
[INF] Using Interactsh Server: oast.site
[WRN] [CVE-2025-61882] Could not execute step on http://ebs1.example.com:8000: cause="got following errors while executing flow" address=ebs1.example.com:8000 chain="failed to execute http:1 protocol; port closed or filtered; connection refused; i/o timeout; got err while executing http://ebs1.example.com:8000/OA_HTML/help/../ieshostedsurvey.jsp"
[INF] Scan completed in 58.666890788s. No results found.Anything else?
http:
- raw:
- |
GET /OA_HTML/help/../ieshostedsurvey.jsp HTTP/1.1
Host: {{Host}}:**7201**
7201 is a base port, in some cases, it is added by a number(1~99）。
In my case it is 10, that is : 7211, I changed it to 7211, but the result is same.
Another issue:
My EBS is configured Nginx before the EBS, so the base url is : https://ebs.example.com, does it work as well?
BTW:
This template is simple but seems works well. which one is better?
https://github.com/rxerium/CVE-2025-61882/blob/main/CVE-2025-61882.yaml