{"id":84147,"date":"2020-05-15T11:38:44","date_gmt":"2020-05-15T03:38:44","guid":{"rendered":"http:\/\/4563.org\/?p=84147"},"modified":"2020-05-15T11:38:44","modified_gmt":"2020-05-15T03:38:44","slug":"gerrit-%e6%bc%8f%e6%b4%9e%e4%bf%ae%e5%a4%8d%e6%b1%82%e5%8a%a9","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=84147","title":{"rendered":"gerrit \u6f0f\u6d1e\u4fee\u590d\u6c42\u52a9"},"content":{"rendered":"<div>\n<div>\n<div>\n<h1>                  gerrit \u6f0f\u6d1e\u4fee\u590d\u6c42\u52a9               <\/h1>\n<p> <\/p>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : Vindroid <\/span>  <span><i><\/i> 7<\/span> <\/div>\n<div> <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div isfirst=\"1\"> <\/p>\n<p>gerrit+nginx<br \/> Git Repository Served by Web Server<br \/> Description<br \/> The web server on the remote host allows read access to a Git repository. This potential flaw can be used to download content from the Web server that might otherwise be private.<br \/> Solution<br \/> Verify that the listed Git repositories are served intentionally<br \/> The following repositories were found on the remote web server :<br \/> Repository : http:\/\/192.168.100.101:8088\/access<br \/> Type: Bare<br \/> Transport: Smart HTTP<br \/> \u8fd8\u6709\u597d\u51e0\u4e2a\u76ee\u5f55\uff0c\u4e0d\u662f\u4e13\u4e1a\u8fd0\u7ef4\uff0c\u4e0d\u61c2 server \u7aef\uff0c\u5f53\u521d\u53ea\u662f\u4e3a\u4e86\u80fd\u7528\u800c\u5df2\uff0c\u867d\u7136\u63d0\u4f9b\u4e86\u89e3\u51b3\u7684\u63cf\u8ff0\uff0c\u4f46\u4e0d\u77e5\u9053\u5177\u4f53\u8981\u600e\u4e48\u914d\u7f6e<\/p>\n<\/p><\/div>\n<div> <b>\u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (<span>1<\/span>)        <\/div>\n<div> <\/div>\n<\/p><\/div>\n<\/p><\/div>\n<ul>\n<li data-pid=\"1466064\" data-uid=\"2\">\n<div>\n<div>\n<div> <span>\u8cc7\u6df1\u5927\u4f6c : defunct9 <\/span>  <\/div>\n<div> <i title=\"\u5f15\u7528\"><\/i>  <span>          <\/span> <\/div>\n<\/p><\/div>\n<div>                                                             \u5f00 ssh\uff0c\u8ba9\u6211\u4e0a\u53bb\u770b\u770b                                                            <\/div>\n<\/p><\/div>\n<\/li>\n<li>\n","protected":false},"excerpt":{"rendered":"<p>gerrit \u6f0f\u6d1e\u4fee\u590d\u6c42\u52a9 \u8cc7\u6df1\u5927&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/84147"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=84147"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/84147\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=84147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=84147"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=84147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}