| 제목 | tarzan-cms 1.0.0 Incomplete Identification of Uploaded File Variables |
|---|
| 설명 | Address: https://gitee.com/taisan/tarzan-cms
Purpose: The goal is to build a simple and easy-to-use CMS content management system, allowing small and micro enterprises with no technical background to quickly create websites, as well as individuals to build personal blogs and personal brands.
In the latest version of this CMS, there is an arbitrary file upload vulnerability. |
|---|
| 원천 | ⚠️ https://gitee.com/taisan/tarzan-cms/issues/IBCUPG |
|---|
| 사용자 | redpomelo (UID 79353) |
|---|
| 제출 | 2024. 12. 21. PM 02:30 (1 년도 ago) |
|---|
| 모더레이션 | 2024. 12. 28. PM 05:42 (7 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 289713 [taisan tarzan-cms 1.0.0 Article Management UploadController.java UploadResponse 파일 권한 상승] |
|---|
| 포인트들 | 19 |
|---|