| Titel | https://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 Arbitrary File Upload |
|---|
| Beschreibung | It used improper path concatenation in `WebIMController.java` and failed to perform proper file type validation for uploaded files, leading to an Arbitrary File Upload vulnerability. |
|---|
| Quelle | ⚠️ https://github.com/mapl3miss/uckefuVul/blob/main/uckefu-upload.md |
|---|
| Benutzer | maple147 (UID 83772) |
|---|
| Einreichung | 07.04.2025 04:50 (vor 1 Jahr) |
|---|
| Moderieren | 07.04.2025 08:37 (4 hours later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 303627 [zhangyanbo2007 youkefu 4.2.0 File Upload WebIMController.java ID Directory Traversal] |
|---|
| Punkte | 15 |
|---|