| शीर्षक | ProjectSend ProjectSend file sharing web application r1605 Insecure direct object references |
|---|
| विवरण | ProjectSend file sharing web application before and including version r1605 is vulnerable to unauthenticated IDOR leads to leak the full URL for the images thumbnails if the uploaded file is an image that means an unauthenticated attacker could be able to see secret images in the system. |
|---|
| स्रोत | ⚠️ https://github.com/projectsend/projectsend/commit/eb5a04774927e5855b9d0e5870a2aae5a3dc5a08 |
|---|
| उपयोगकर्ता | Casp3r0x0 (UID 64832) |
|---|
| सबमिशन | 02/08/2024 12:41 PM (2 साल पहले) |
|---|
| संयम | 10/08/2024 10:00 AM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 274115 [projectsend तक r1605 process.php get_preview अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|