PRP: DocsGPT CVE-2025-0868: Unauthenticated Remote Code Execution

[frkngksl]

Hi @tooryx , @maoning ,

I would like to test the new template system with this vulnerability. (also trying this new PRP suggestion template :D )

• Identifier of the vulnerability: CVE-2025-0868
• Affected software: DocsGPT
• Type of vulnerability: Unauthenticated Remote Code Execution
• Requires authentication: No
• Language you would use for writing the plugin: Templated Plugin
• Resources:
  • https://www.wiz.io/vulnerability-database/cve/cve-2025-0868
  • https://github.com/arc53/DocsGPT
  • https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0868.yaml

[tooryx]

Hi @frkngksl,

You can proceed.

~tooryx

[frkngksl]

Hi @tooryx ,

Where should I put corresponding proto files for this request? It seems that there is no community folder for community created templated plugins?

[frkngksl]

Hi again @tooryx ,

Before pushing this new template, I realized that you haven't implemented linter for test proto files right because it couldn't find any test, even for the proto files in the master branch.

yuta@yuta-virtual-machine:~$ ~/go/bin/linter ~/Desktop/tsunami-security-scanner-plugins/templated/templateddetector/plugins/cve/2023/H2o_CVE_2023_6018_test.textproto 
4:42PM WRN No tests found for plugin with auto-detected path. Did you write tests? Did you use the `_test.textproto` pattern for the filename? documentation=None filename=/home/yuta/Desktop/tsunami-security-scanner-plugins/templated/templateddetector/plugins/cve/2023/H2o_CVE_2023_6018_test.textproto linter=test-file-not-found

[tooryx]

Hi @frkngksl,

There is no community folder for templated plugins. See https://google.github.io/tsunami-security-scanner/howto/new-detector/templated/appendix-naming-plugin for how to name and where to place your plugin.

As for the linter, it will automatically detect the test file, you just need to pass it the plugin file. It will report the warning you had if it cannot automatically find the test file. For example:

$ ~/go/bin/linter ~/Desktop/tsunami-security-scanner-plugins/templated/templateddetector/plugins/cve/2023/H2o_CVE_2023_6018.textproto 

~tooryx

[frkngksl]

Hi @tooryx , @maoning

I've created the following PR for this issue.

#652

[tooryx]

Hi @frkngksl,

Congratulations you have been granted a reward! 🎉

The Tsunami review panel just decided on a reward for this contribution and you should receive information about it in a few minutes/hours.

Thank you for being a valuable Tsunami contributor.

~tooryx on behalf of the Tsunami team