제출 #585342: enilu web-flash 1.0 Arbitrary File Upload정보

제목enilu web-flash 1.0 Arbitrary File Upload
설명In src/main/java/cn/enilu/flash/api/controller/FileController/upload,the code here does not check the legality of the file suffix uploaded,which caused unexpected files to be uploaded
원천⚠️ https://gitee.com/enilu/web-flash/issues/ICAXTM
사용자
 electroN1c (UID 85481)
제출2025. 05. 27. PM 12:03 (1 년도 ago)
모더레이션2025. 06. 03. AM 11:39 (7 days later)
상태수락
VulDB 항목310959 [enilu web-flash 1.0 File Upload upload fileService.upload file 크로스 사이트 스크립팅]
포인트들15

Do you want to use VulDB in your project?

Use the official API to access entries easily!