| शीर्षक | yanyutao0402 ChanCMS V3.3.0 Unauthorized SSRF |
|---|
| विवरण | The getPages and getArticle methods in CollectController both get the URL from the request body and call collect.common to get the contents of the URL. In the getPages method, the targetUrl parameter has been verified by the isValidTargetUrl function. However, in the getArticle method, the taskUrl parameter is not validated by isValidTargetUrl before being passed to collect.common. |
|---|
| स्रोत | ⚠️ https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e7.md |
|---|
| उपयोगकर्ता | Yu_Bao (UID 89348) |
|---|
| सबमिशन | 22/08/2025 12:19 PM (1 वर्ष पहले) |
|---|
| संयम | 10/09/2025 12:24 PM (19 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 323484 [yanyutao0402 ChanCMS 3.3.0 /cms/collect/getArticle CollectController taskUrl अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|