Description
MapProxy对X-Forwarded头的验证和处理不当，攻击者可构造file:// URL，绕过访问控制，通过本地文件包含漏洞读取本地文件。
MapProxy存在本地文件包含漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://security.snyk.io/package/pip/MapProxy/1.13.0
https://s4e.io/tools/mapproxy-local-file-inclusion-scanner
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/mapproxy-file-read.yaml
https://cve.imfht.com/poc_detail/7ba261839b34229dcc304b0f5d5aa0a5b8841d68
https://www.ddpoc.com/DVB-2025-9949.html
https://newreleases.io/project/github/projectdiscovery/nuclei-templates/release/v10.2.8