Arbitrary file reading vulnerability
S2eTo opened this issue · comments
API: common/download, parameter: fileName is not verified, resulting in arbitrary file download
com.luckyframe.project.common.CommonController#fileDownload
Use authentication bypass vulnerability to read pom.xml file
GET /css/..;/common/download?fileName=../../pom.xml HTTP/1.1