Description
SolarWinds Inc. 是一家美国公司，为企业提软件以帮助管理其网络，系统和信息技术基础架构。攻击者通过构造恶意URI，可以绕过API身份验证，从而利用API功能造成远程代码执行漏洞。
SolarWinds Orion API 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/B1anda0/CVE-2020-10148
https://it.ruc.edu.cn/wlaq/3ce71f883e8f4b66b629785bcee726bf.htm
https://stack.chaitin.com/vuldb/detail/fae1f7c5-8b7b-438f-a807-2b4889dcbbe5
https://www.venustech.com.cn/new_type/aqtg/20201228/22237.html
https://zhuanlan.zhihu.com/p/343803207
https://blog.csdn.net/weixin_44146996/article/details/112022317
https://cloud.tencent.com/developer/article/1766530
https://nvd.nist.gov/vuln/detail/CVE-2020-10148
https://kb.cert.org/vuls/id/843464
https://www.solarwinds.com/securityadvisory