| Título | wander-chu SpringBoot-Blog 1.0 arbitrary file uploads |
|---|
| Descrição | The upload method in src/main/java/com/my/blog/website/controller/admin/AttachtController.java does not restrict the uploaded files, and can directly upload JSP and HTML Trojan files |
|---|
| Fonte | ⚠️ https://github.com/wander-chu/SpringBoot-Blog/issues/6 |
|---|
| Utilizador | LVZC2 (UID 76821) |
|---|
| Submissão | 28/12/2024 10h13 (há 2 anos) |
|---|
| Moderação | 08/01/2025 15h51 (11 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 290794 [wander-chu SpringBoot-Blog 1.0 Admin Attachment AttachtController.java upload file Elevação de Privilégios] |
|---|
| Pontos | 15 |
|---|