Description
CData sync存在路径遍历漏洞，此漏洞是由于/ui/接口对用户的请求验证不当造成的。
CData Sync CVE-2024-31851 路径遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-31851
https://www.cve.org/CVERecord?id=CVE-2024-31851
https://access.redhat.com/security/cve/cve-2024-31851
https://avd.aliyun.com/detail?id=AVD-2024-31851
https://www.tenable.com/security/research/tra-2024-09
https://cn-sec.com/archives/2718312.html
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31851.yaml
https://cve.imfht.com/detail/CVE-2024-31851
https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2024-0257.html/
https://devhub.checkmarx.com/cve-details/cve-2024-31851/
https://avd.aquasec.com/nvd/2024/cve-2024-31851/
https://www.cdata.com/kb/entries/jetty-cve-0324.rst
https://cve.komodosec.com/cve-list?search=&year=&has_exploit=&results_per_page=15&sort=cvss_score2&order=descending&page_number=21827