Description
FileMage Gateway Windows Deployments 1.10.8及之前版本存在目录遍历漏洞，远程攻击者可利用该漏洞通过/mgmt/组件的特制请求获取敏感信息。
FileMage Gateway /mgmnt 文件读取漏洞（CVE-2023-39026）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-39026
https://raindayzz.com/technicalblog/2023/08/20/FileMage-Vulnerability.html
https://www.exploit-db.com/exploits/51708
https://github.com/advisories/GHSA-6m35-6x4j-hxjg
https://cve.imfht.com/detail/CVE-2023-39026
https://www.sentinelone.com/vulnerability-database/cve-2023-39026/
https://www.filemage.io/docs/updates.html#change-log
http://packetstormsecurity.com/files/174491/FileMage-Gateway-1.10.9-Local-File-Inclusion.html