Invia #251733: rmountjoy92 DashMachine 0.5-4 docker ArbitraryFileDeletioninformazioni

Titolormountjoy92 DashMachine 0.5-4 docker ArbitraryFileDeletion
DescrizioneDashMachine is another web application bookmark dashboard, with fun features. /settings/delete_file接口未对file参数进行过滤,攻击者可在未登录的情况下删除服务器上的任意文件。
Fonte⚠️ https://treasure-blarney-085.notion.site/DashMachine-Arbitrary-File-Deletion-ab44f2fe68e843c393ae9e0c1d487676
Utente
 zgbsm (UID 57268)
Sottomissione13/12/2023 09:48 (3 anni fa)
Moderazione16/12/2023 20:38 (3 days later)
StatoAccettato
Voce VulDB248258 [rmountjoy92 DashMachine 0.5-4 /settings/delete_file File]
Punti14

Do you know our Splunk app?

Download it now for free!