إرسال #558283: https://gitee.com/playeduxyz/playedu v1.8 SSRF
| عنوان | https://gitee.com/playeduxyz/playedu v1.8 SSRF |
|---|---|
| الوصف | I found that an SSRF vulnerability can be triggered at the image added by the user in the admin background, which may cause information leakage |
| المصدر | ⚠️ https:/ |
| المستخدم | keke (UID 83676) |
| ارسال | 15/04/2025 01:13 PM (1 سنة منذ) |
| الاعتدال | 27/04/2025 03:58 PM (12 days later) |
| الحالة | تمت الموافقة |
| إدخال VulDB | 306365 [playeduxyz PlayEdu 开源培训系统 حتى 1.8 User Avatar create avatar تجاوز الصلاحيات] |
| النقاط | 15 |