| शीर्षक | yanyutao0402 ChanCMS V3.3.0 Unauthorized RCE |
|---|
| विवरण | The search method in app/modules/cms/controller/collect.js，the getArticle method also has a potential remote code execution (RCE) vulnerability. It gets the parseData from the request body and then uses new Function() to execute it. Although the code tries to clean up parseData using safeExecuteUserFunction, this blacklisting method is usually unreliable. An attacker may find ways to bypass filtering and thus execute arbitrary JavaScript code. Since this is executed on the server side, it is an RCE vulnerability. |
|---|
| स्रोत | ⚠️ https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e6.md |
|---|
| उपयोगकर्ता | Yu_Bao (UID 89348) |
|---|
| सबमिशन | 22/08/2025 12:17 PM (1 वर्ष पहले) |
|---|
| संयम | 10/09/2025 12:24 PM (19 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 317857 [yanyutao0402 ChanCMS तक 3.1.2 collect.js getArticle targetUrl अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|