Description
Traggo Server 是一个基于标签的时间跟踪工具。Traggo Server 0.3.0 容易受到通过构建的 GET 请求进行目录遍历的攻击。
TraggoServer /static 文件读取漏洞（CVE-2023-34843）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-34843
https://github.com/rootd4ddy/CVE-2023-34843
https://pentest-tools.com/vulnerabilities-exploits/traggo-server-local-file-inclusion_2633
https://vulners.com/cve/CVE-2023-34843
https://vi.strobes.co/cve/CVE-2023-34843
https://cve.imfht.com/poc_detail/c670103766d6e4b357be69ee61999495ff9b163b?lang=en