CVE-2022-23854 PoC — AVEVA InTouch Access Anywhere Secure Gateway 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23854.yaml

Associated Vulnerability

Title:AVEVA InTouch Access Anywhere Secure Gateway 路径遍历漏洞 (CVE-2022-23854)
Description:AVEVA InTouch Access Anywhere Secure Gateway是英国剑维软件（AVEVA）公司的一个 InTouch 扩展。为移动用户和临时用户提供通过 HTML5 兼容浏览器访问 InTouch 应用程序的功能。 AVEVA InTouch Access Anywhere Secure Gateway 2020 R2及以前的版本存在路径遍历漏洞，该漏洞源于路径遍历。

Description

AVEVA InTouch Access Anywhere Secure Gateway is vulnerable to local file inclusion.

File Snapshot


 id: CVE-2022-23854

info:
  name: AVEVA InTouch Access Anywhere Secure Gateway - Local File Inclusio

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!