CVE-2017-1000028 PoC — Oracle GlassFish Server Open Source Edition 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000028.yaml

Associated Vulnerability

Title:Oracle GlassFish Server Open Source Edition 路径遍历漏洞 (CVE-2017-1000028)
Description:Oracle GlassFish Server Open Source Edition是美国甲骨文（Oracle）公司的一套开源版本的用于构建Java EE（服务器端Java应用程序）的服务器。 Oracle GlassFish Server Open Source Edition 4.1版本中存在目录遍历漏洞。攻击者可借助特制的HTTP GET请求利用该漏洞访问敏感数据。

Description

Oracle GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated local file inclusion vulnerabilities that can be exploited by issuing specially crafted HTTP GET requests.

File Snapshot


 id: CVE-2017-1000028

info:
  name: Oracle GlassFish Server Open Source Edition 4.1 - Local File Inc

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!