Invia #558283: https://gitee.com/playeduxyz/playedu v1.8 SSRF
| Titolo | https://gitee.com/playeduxyz/playedu v1.8 SSRF |
|---|---|
| Descrizione | I found that an SSRF vulnerability can be triggered at the image added by the user in the admin background, which may cause information leakage |
| Fonte | ⚠️ https:/ |
| Utente | keke (UID 83676) |
| Sottomissione | 15/04/2025 13:13 (1 Anno fa) |
| Moderazione | 27/04/2025 15:58 (12 days later) |
| Stato | Accettato |
| Voce VulDB | 306365 [playeduxyz PlayEdu 开源培训系统 fino a 1.8 User Avatar create escalationi di privilegi] |
| Punti | 15 |