Soumettre #480841: JoeyBling bootplus 1.0 upload any fileinformation

TitreJoeyBling bootplus 1.0 upload any file
DescriptionThe upload method of src/main/java/io/github/controller/SysFileController.java does not filter uploaded files, resulting in the upload of JSP and HTML Trojans
La source⚠️ https://github.com/JoeyBling/bootplus/issues/24
Utilisateur
 LVZC3 (UID 79687)
Soumission14/01/2025 12:41 (il y a 2 ans)
Modérer24/01/2025 10:46 (10 days later)
StatutAccepté
Entrée VulDB293230 [JoeyBling bootplus SysFileController.java portraitFile élévation de privilèges]
Points15

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!