제출 #469220: ZHENFENG13 My-Blog 1.0 any file upload정보

제목ZHENFENG13 My-Blog 1.0 any file upload
설명In src/main/java/com/site/blog/my/core/controller/admin/LogController. java, the uploadFileByEditomd method does not restrict the uploaded files, resulting in arbitrary file uploads
원천⚠️ https://github.com/ZHENFENG13/My-Blog/issues/140
사용자
 LVZC1 (UID 76422)
제출2024. 12. 26. PM 03:05 (1 년도 ago)
모더레이션2025. 01. 05. AM 10:14 (10 days later)
상태수락
VulDB 항목290232 [zhenfeng13 My-Blog 1.0 BlogController.java uploadFileByEditomd editormd-image-file 권한 상승]
포인트들15

◂ 이전개요다음 ▸

Do you need the next level of professionalism?

Upgrade your account now!