Description
OSSN 存在任意文件读取漏洞，该漏洞是由于应用程序使用了不安全的随机数生成函数导致的。
OSSN CVE-2020-10560 任意文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://pingmaoer.github.io/2020/04/10/CVE-2020-10560-OSSN%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/
https://blog.csdn.net/zzgslh/article/details/105436635
https://cve.circl.lu/vuln/cve-2020-10560
https://www.cnvd.org.cn/flaw/show/CNVD-2020-25801
https://nvd.nist.gov/vuln/detail/CVE-2020-10560
https://techanarchy.net/cve-2020-10560-ossn-arbitrary-file-read/
https://github.com/kevthehermit/CVE-2020-10560