安全研究
CVE-2021-39316 DZS Zoomsounds：未授权任意文件读取
Thinking
2021-08-15
2 分钟阅读
研究档案
#漏洞分析#代码审计#Web安全
DZS Zoomsounds 插件有一个 download 端点，没做权限校验就直接把客户端传的路径读出来——攻击者构造 ../../../wp-config.php 就能读到数据库密码。
Unlock to view this content.
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