CVE-2021-43734 PoC — Keking kkFileview 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43734.yaml

Associated Vulnerability

Title:Keking kkFileview 路径遍历漏洞 (CVE-2021-43734)
Description:Keking KkFileview是中国凯京科技（Keking）公司的一个 Spring-Boot 打造文件文档在线预览项目。 Keking kkFileview 存在安全漏洞，该漏洞源于存在通过目录遍历漏洞读取任意文件，可能导致相关主机上的敏感文件泄漏。

Description

kkFileview v4.0.0 is vulnerable to local file inclusion which may lead to a sensitive file leak on a related host.

File Snapshot


 id: CVE-2021-43734

info:
  name: kkFileview v4.0.0 - Local File Inclusion
  author: arafatansari
  

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!