Invia #618189: JeeSite https://github.com/thinkgem/jeesite5 <=5.12.0 Dangerous type of file upload (CWE-434)informazioni

TitoloJeeSite https://github.com/thinkgem/jeesite5 <=5.12.0 Dangerous type of file upload (CWE-434)
DescrizioneThe endpoint /js/a/file/upload allows user uploads PDF file without sanitizer lead to Stored XSS.
Fonte⚠️ https://github.com/thinkgem/jeesite5/issues/31
Utente
 ZAST.AI (UID 87884)
Sottomissione18/07/2025 05:44 (1 Anno fa)
Moderazione19/07/2025 06:17 (1 day later)
StatoAccettato
Voce VulDB316977 [thinkgem JeeSite fino a 5.12.0 FileUploadController.java upload escalationi di privilegi]
Punti14

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you need the next level of professionalism?

Upgrade your account now!