CVE-2020-8982 PoC — Citrix Systems Citrix ShareFile storage zones Controller 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8982.yaml

Associated Vulnerability

Title:Citrix Systems Citrix ShareFile storage zones Controller 路径遍历漏洞 (CVE-2020-8982)
Description:Citrix Systems Citrix ShareFile是美国思杰系统（Citrix Systems）公司的一套文件共享解决方案。storage zones Controller是其中的一个存储区控制器。 Citrix Systems Citrix ShareFile storage zones Controller中存在路径遍历漏洞。攻击者可利用该漏洞访问ShareFile用户的文档和文件夹。以下产品及版本受到影响：Citrix ShareFile storage zones Controller

Description

Citrix ShareFile StorageZones (aka storage zones) Controller versions through at least 5.10.x are susceptible to an unauthenticated arbitrary file read vulnerability.

File Snapshot


 id: CVE-2020-8982

info:
  name: Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read
  auth

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!