| शीर्षक | zsadmin ZS-Admin <=1.0.0 Unrestricted Upload |
|---|
| विवरण | The ZS-Admin file upload module accepts files through MultipartFile. The server extracts the extension from the original filename and generates a new filename in the format UUID + original extension. No extension whitelist, MIME type whitelist, or magic-byte validation was found in this flow.
As a result, an attacker can upload files with arbitrary extensions such as .svg, .html, or .jsp. JSP execution was not confirmed in the tested environment, so this issue should not be described as remote code execution. However, if the uploaded directory allows inline rendering of SVG or HTML, the issue may lead to stored cross-site scripting. |
|---|
| स्रोत | ⚠️ https://github.com/zsadmin2025/zs-admin-java/issues/6 |
|---|
| उपयोगकर्ता | cl0ney (UID 99026) |
|---|
| सबमिशन | 15/06/2026 05:51 PM (1 महीना पहले) |
|---|
| संयम | 21/07/2026 10:55 AM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 380830 [zsadmin2025 ZS-Admin तक b52e14536d59fda11e56e2536a1c32e82a38cead com.zs.file.controller.SysFileController /api/system/file/upload Arquivo अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|