CVE-2019-3799 PoC — Pivotal Software Spring Cloud Config 路径遍历漏洞

Source

Associated Vulnerability

Title:Pivotal Software Spring Cloud Config 路径遍历漏洞 (CVE-2019-3799)
Description:Pivotal Software Spring Cloud Config是美国Pivotal Software公司的一套分布式系统的配置管理解决方案。该产品主要为分布式系统中的外部配置提供服务器和客户端支持。 Pivotal Software Spring Cloud Config中存在路径遍历漏洞，该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。以下版本受到影响：Spring Cloud Config 2.1.2之前的2.1.x版本，2.0.4

Description

Spring Cloud Config CVE-2019-3799|CVE_2020_5410 漏洞检测

File Snapshot


 [4.0K]  /data/pocs/4959055dc4bd443c51dd7188b03096b172612576
└── [ 14K]  SpringCloud.jar

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!