Submit #558283: https://gitee.com/playeduxyz/playedu v1.8 SSRF
| Titel | https://gitee.com/playeduxyz/playedu v1.8 SSRF |
|---|---|
| Beschreibung | I found that an SSRF vulnerability can be triggered at the image added by the user in the admin background, which may cause information leakage |
| Quelle | ⚠️ https:/ |
| Benutzer | keke (UID 83676) |
| Einreichung | 15.04.2025 13:13 (vor 1 Jahr) |
| Moderieren | 27.04.2025 15:58 (12 days later) |
| Status | Akzeptiert |
| VulDB Eintrag | 306365 [playeduxyz PlayEdu 开源培训系统 bis 1.8 User Avatar create erweiterte Rechte] |
| Punkte | 15 |