CVE-2023-41599 PoC — JFinalCMS 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41599.yaml

Associated Vulnerability

Title:JFinalCMS 路径遍历漏洞 (CVE-2023-41599)
Description:JFinalCMS是heyewei个人开发者的一个内容管理系统。 JFinalCMS v5.0.0版本存在路径遍历漏洞，该漏洞源于组件 /common/DownController.java 允许攻击者执行目录遍历。

Description

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal.

File Snapshot


 id: CVE-2023-41599

info:
  name: JFinalCMS v5.0.0 - Directory Traversal
  author: pussycat0x
  seve

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!