إرسال #618189: JeeSite https://github.com/thinkgem/jeesite5 <=5.12.0 Dangerous type of file upload (CWE-434)المعلومات

عنوانJeeSite https://github.com/thinkgem/jeesite5 <=5.12.0 Dangerous type of file upload (CWE-434)
الوصفThe endpoint /js/a/file/upload allows user uploads PDF file without sanitizer lead to Stored XSS.
المصدر⚠️ https://github.com/thinkgem/jeesite5/issues/31
المستخدم
 ZAST.AI (UID 87884)
ارسال18/07/2025 05:44 AM (9 أشهر منذ)
الاعتدال19/07/2025 06:17 AM (1 day later)
الحالةتمت الموافقة
إدخال VulDB316977 [thinkgem JeeSite حتى 5.12.0 FileUploadController.java upload تجاوز الصلاحيات]
النقاط14

التالي ▸نظرة عامة◂ السابق

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!