CVE-2021-48015: erzhongxmu JeeWMS, обхождане на път

Описание

Оригинално описание

JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter. Attackers can send GET requests to /systemController/showOrDownByurl.do with ../ sequences in dbPath, which bypasses AuthInterceptor, to retrieve files like win.ini. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-17.

Засегнати продукти

• erzhongxmu JeeWMS: 194f221776cfcfd838abab7107b1a8352ea2bc59 преди 0a610e8178a0a1197e9c6615b58faf67c406d2bc

Вид слабост

• CWE-22 Неправилно ограничаване на път до позволена директория

История

Други уязвимости в erzhongxmu JeeWMS

• 6.3CVE-2026-108782
• 6.3CVE-2026-108781
• 6.3CVE-2026-108779
• 6.3CVE-2026-108778
• 6.3CVE-2026-108777

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-48015
• https://nvd.nist.gov/vuln/detail/CVE-2021-48015
• https://github.com/MrWQ/vulnerability-paper/blob/master/bugs/JEEWMS_%E4%BB%93%E5%BA%93%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%E5%AD%98%E5%9C%A8%E6%9D%83%E9%99%90%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%E5%92%8C%E6%9C%AA%E6%8E%88%E6%9D%83%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.md
• https://github.com/tzwlhack/Vulnerability/blob/main/JEEWMS%20%E6%9C%AA%E6%8E%88%E6%9D%83%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
• https://github.com/erzhongxmu/JeeWMS/commit/0a610e8178a0a1197e9c6615b58faf67c406d2bc
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/jeewms-lfi.yaml
• https://www.vulncheck.com/advisories/jeewms-path-traversal-via-showordownbyurl-do