إرسال #585342: enilu web-flash 1.0 Arbitrary File Uploadالمعلومات

عنوانenilu web-flash 1.0 Arbitrary File Upload
الوصفIn src/main/java/cn/enilu/flash/api/controller/FileController/upload,the code here does not check the legality of the file suffix uploaded,which caused unexpected files to be uploaded
المصدر⚠️ https://gitee.com/enilu/web-flash/issues/ICAXTM
المستخدم
 electroN1c (UID 85481)
ارسال27/05/2025 12:03 PM (1 سنة منذ)
الاعتدال03/06/2025 11:39 AM (7 days later)
الحالةتمت الموافقة
إدخال VulDB310959 [enilu web-flash 1.0 File Upload upload fileService.upload file البرمجة عبر المواقع]
النقاط15

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!