关键漏洞信息 Vendor: kalicadle Product: kodbox Version: V1.61.09 Vulnerability: Arbitrary File Read Description The vulnerability lies within the function in . It allows users to read any file on the server. Analysis Vulnerable Lines: - Line 200: - User-controlled path is directly taken. - Line 235: The unsanitized is passed to . - Line 300: performs the actual file read operation. Explanation 1. Line 200 assigns the user-controlled path to without sanitization. 2. Line 235 passes to . 3. Line 300 attempts to read the file specified by the attacker, leading to path traversal. POC