-
Notifications
You must be signed in to change notification settings - Fork 2.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
arbitrary file read vulnerability #304
Comments
谢谢 指点 |
@RequestMapping(value = "/getCorsFile", method = RequestMethod.GET) |
修复没 |
请问这个漏洞修复成功了吗 |
已经修复了 |
kkFileView arbitrary file read vulnerability
问题描述Description
最近在公司内部渗透测试中发现某处引用的kkFileView 4.0.0存在任意文件读取漏洞,可通过漏洞读取主机任意文件,易造成敏感信息泄漏。
kkFileview v4.0.0 has arbitrary file read vulnerability which may lead to sensitive file leak on related host。
漏洞位置vulerable code location
kkFileView/server/src/main/java/cn/keking/web/controller/OnlinePreviewController.java
文件103行,urlPath参数支持file协议The vulnerable code is located at line 103 in
kkFileView/server/src/main/java/cn/keking/web/controller/OnlinePreviewController.java
. The value which passed through paramurlPath
supports file protocol.漏洞证明PoC
官方演示站点为最新4.0.0版本,以此为演示,访问漏洞位置https://file.keking.cn/getCorsFile?urlPath=file:///etc/passwd 可得
The version of official demo site is v4.0.0. Visit https://file.keking.cn/getCorsFile?urlPath=file:///etc/passwd and the concept is proofed.
The text was updated successfully, but these errors were encountered: