| عنوان | zlt2000 https://github.com/zlt2000/microservices-platform <=6.0.0 Unrestricted Upload of File with Dangerous Type (CWE-434) |
|---|
| الوصف | In the latest version 6.0.0, the endpoint /api-user/users/file-anon (file-center service ) does not perform any security processing on uploaded files, allowing attackers to upload malicious code to the S3 server. Common attack methods include uploading HTML or PDF files containing malicious JavaScript code to launch XSS or phishing attacks against users. |
|---|
| المصدر | ⚠️ https://github.com/zlt2000/microservices-platform/issues/77 |
|---|
| المستخدم | ZAST.AI (UID 87884) |
|---|
| ارسال | 26/07/2025 03:53 AM (1 سنة منذ) |
|---|
| الاعتدال | 10/08/2025 01:32 PM (15 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 319375 [zlt2000 microservices-platform حتى 6.0.0 FileController.java upload تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|