CVE-2017-1000029 PoC — Oracle GlassFish Server Open Source Edition 信息泄露漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000029.yaml

Associated Vulnerability

Title:Oracle GlassFish Server Open Source Edition 信息泄露漏洞 (CVE-2017-1000029)
Description:Oracle GlassFish Server Open Source Edition是美国甲骨文（Oracle）公司的一套开源版本的用于构建Java EE（服务器端Java应用程序）的服务器。 Oracle GlassFish Server Open Source Edition 3.0.1 (build 22)版本中存在本地文件包含漏洞。攻击者可利用该漏洞包含服务器上的任意文件。

Description

Oracle GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to unauthenticated local file inclusion vulnerabilities that allow remote attackers to request arbitrary files on the server.

File Snapshot


 id: CVE-2017-1000029

info:
  name: Oracle GlassFish Server Open Source Edition 3.0.1 - Local File I

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!