CVE-2020-17518

This PoC exploits CVE-2020-17518, a directory traversal vulnerability in Apache Flink's REST API, allowing arbitrary file write via malicious HTTP headers. The script checks for vulnerability by attempting to write a test file to a traversed path.

This repository contains a valid proof-of-concept for CVE-2020-17518, an arbitrary file upload vulnerability in Apache Flink via directory traversal. The PoC demonstrates how an attacker can upload files to arbitrary directories on the local filesystem by crafting HTTP requests with malicious filenames.

This PoC exploits CVE-2020-17518 in Apache Flink by uploading a malicious JAR file to achieve remote code execution. It leverages a directory traversal vulnerability to place the JAR in a predictable location and provides a command execution endpoint.