Soumettre #558283: https://gitee.com/playeduxyz/playedu v1.8 SSRF
| Titre | https://gitee.com/playeduxyz/playedu v1.8 SSRF |
|---|---|
| Description | I found that an SSRF vulnerability can be triggered at the image added by the user in the admin background, which may cause information leakage |
| La source | ⚠️ https:/ |
| Utilisateur | keke (UID 83676) |
| Soumission | 15/04/2025 13:13 (il y a 1 Année) |
| Modérer | 27/04/2025 15:58 (12 days later) |
| Statut | Accepté |
| Entrée VulDB | 306365 [playeduxyz PlayEdu 开源培训系统 jusqu’à 1.8 User Avatar create avatar élévation de privilèges] |
| Points | 15 |