Description
CData API Server一种用于创建、部署和管理自定义 API 的服务器。CData API Server存在目录遍历漏洞，此漏洞是由于未充分验证用户输入的url数据导致的。
CData API Server CVE-2024-31848 目录遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-31848
https://pentest-tools.com/vulnerabilities-exploits/cdata-api-server-2348844-path-traversal_22661
https://www.idappcom.co.uk/post/cdata-api-server-directory-traversal-cve-2024-31848
https://github.com/Stuub/CVE-2024-31848-PoC
https://www.tenable.com/security/research/tra-2024-09
https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2024-0257.html
https://www.cdata.com/kb/entries/jetty-cve-0324.rst
https://access.redhat.com/security/cve/cve-2024-31848