Submit #299169: EasyAdmin EasyAdmin lastest File Upload, XXE and SSRF Vulnerabilityinfo

TitelEasyAdmin EasyAdmin lastest File Upload, XXE and SSRF Vulnerability
BeschreibungThe vulnerability is located at /ureport/designer/saveReportFile, where we can conduct File Upload, XXE, and SSRF attacks.
Quelle⚠️ https://gitee.com/lakernote/easy-admin/issues/I98ZTA
Benutzer
 Southseast (UID 65123)
Einreichung15.03.2024 14:45 (vor 2 Jahren)
Moderieren22.03.2024 11:50 (7 days later)
StatusAkzeptiert
VulDB Eintrag257717 [lakernote EasyAdmin bis 20240315 saveReportFile erweiterte Rechte]
Punkte14

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!