admin/GobyVuls

mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-05 18:27:13 +00:00

gobysec 7dd7af4d2f fix image path

2021-08-04 20:43:19 +08:00

295 B

Raw Permalink Blame History

Jetty File Read (CVE-2021-34429)

/%u002e/WEB-INF/web.xml and /.%00/WEB-INF/web.xml After normalization and decoding, it will become /./WEB-INF/web.xml.

FOFA query rule: app="Jetty"

Demo