Submeter #469220: ZHENFENG13 My-Blog 1.0 any file uploadinformação

TítuloZHENFENG13 My-Blog 1.0 any file upload
DescriçãoIn src/main/java/com/site/blog/my/core/controller/admin/LogController. java, the uploadFileByEditomd method does not restrict the uploaded files, resulting in arbitrary file uploads
Fonte⚠️ https://github.com/ZHENFENG13/My-Blog/issues/140
Utilizador
 LVZC1 (UID 76422)
Submissão26/12/2024 15h05 (há 1 Ano)
Moderação05/01/2025 10h14 (10 days later)
EstadoAceite
Entrada VulDB290232 [zhenfeng13 My-Blog 1.0 BlogController.java uploadFileByEditomd editormd-image-file Elevação de Privilégios]
Pontos15

Want to know what is going to be exploited?

We predict KEV entries!