제출 #473322: 1902756969 reggie 1.0 Read any file정보

제목1902756969 reggie 1.0 Read any file
설명src/main/java/com/itheima/reggie/controller/CommonController.java The download method in the middle does not filter the incoming name parameter, allowing attackers to download any file without logging in
원천⚠️ https://github.com/1902756969/reggie/issues/1
사용자
 LVZC4 (UID 79688)
제출2025. 01. 02. AM 08:42 (1 년도 ago)
모더레이션2025. 01. 12. AM 10:51 (10 days later)
상태수락
VulDB 항목291276 [1902756969 reggie 1.0 CommonController.java download 이름 디렉토리 순회]
포인트들16

◂ 이전개요다음 ▸

Want to know what is going to be exploited?

We predict KEV entries!