ZK框架 CVE-2022-36537 认证绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://tracker.zkoss.org/browse/ZK-5150
• https://nvd.nist.gov/vuln/detail/cve-2022-36537
• https://foresightnews.pro/article/detail/20823
• https://y4er.com/posts/zk-framework-auth-bypass-case-r1soft-rce/
• https://qkl.seebug.org/vuldb/ssvid-99652
• https://github.com/Malwareman007/CVE-2022-36537

Related Vulnerabilities

• PoCCVE-2022-36537: ZK Framework - Information Disclosure
• Stakater Forecastle任意文件读取漏洞(CVE-2022-36537)
• ZK Framework任意文件读取漏洞(CVE-2022-36537)