CVE-2022-39802 PoC — SAP Manufacturing Execution 路径遍历漏洞

Source

https://github.com/redrays-io/CVE-2022-39802

Associated Vulnerability

Title:SAP Manufacturing Execution 路径遍历漏洞 (CVE-2022-39802)
Description:SAP Manufacturing Execution是德国思爱普（SAP）公司的一个用于离散制造过程的综合制造执行系统（MES）解决方案。使MES功能能够专门针对生产环境的管理和控制进行定制。 SAP Manufacturing Execution 15.1版本、15.2版本、15.3版本存在路径遍历漏洞，该漏洞源于对文件路径请求参数的验证不足。攻击者利用该漏洞可以读取每个目录中的文件内容，这可能导致信息泄露。

Description

[CVE-2022-39802] File path traversal vulnerability in SAP Manufacturing Execution

File Snapshot


 [4.0K]  /data/pocs/758bdfd62a31e9a31d683dc1538cfb9b36edc04d
└── [2.9K]  readme.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!