| 向量 | 端点 |
|---|
| 标准 XXE | /rest/V1/guest-carts/{id}/estimate-shipping-methods |
| 标准 XXE（全部） | /rest/all/V1/guest-carts/{id}/estimate-shipping-methods |
| 账单地址 | /rest/V1/guest-carts/{id}/billing-address |
| dataIsURL | 相同端点，设置 dataIsURL: true |
| totalsReader | 替代 JSON 结构 |
| 订单 | /rest/V1/orders、/rest/V1/order |
| 直接路径 | /app/etc/env.php、/.env 等 |
app/etc/env.php（数据库凭据、加密密钥）.env（环境变量）/etc/passwd（用户枚举）/etc/hosts（内部网络映射）/proc/self/environ（进程环境）app/etc/config.php、app/etc/config.local.phpvar/log/system.log、var/log/exception.logpip install requests
python3 cosmicsting-cve-2024-34102.py https://target.com