CVE-2022-31268 PoC — Gitblit 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31268.yaml

Associated Vulnerability

Title:Gitblit 路径遍历漏洞 (CVE-2022-31268)
Description:Gitblit是Gitblit的一个开源的纯 Java Git 解决方案，用于管理、查看和提供Git存储库。 Gitblit 1.9.3 版本存在安全漏洞，该漏洞源于路径遍历问题。攻击者利用该漏洞可以读取网站文件。

Description

Gitblit 1.9.3 is vulnerable to local file inclusion via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).

File Snapshot


 id: CVE-2022-31268

info:
  name: Gitblit 1.9.3 - Local File Inclusion
  author: 0x_Akoko
  severity

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!