| Titel | SingMR HouseRent 1.0 arbitrary file uploads |
|---|
| Beschreibung | The singleUpload method in src/main/java/com/house/wym/controller/AddHouseController. java does not restrict the uploaded files, resulting in arbitrary file uploads |
|---|
| Quelle | ⚠️ https://github.com/SingMR/HouseRent/issues/13 |
|---|
| Benutzer | LVZC2 (UID 76821) |
|---|
| Einreichung | 29.12.2024 07:27 (vor 1 Jahr) |
|---|
| Moderieren | 08.01.2025 17:54 (10 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 290817 [SingMR HouseRent 1.0 AddHouseController.java singleUpload/upload Datei erweiterte Rechte] |
|---|
| Punkte | 15 |
|---|