Submeter #552369: https://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 Arbitrary File Uploadinformação

Títulohttps://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 Arbitrary File Upload
DescriçãoIt used improper path concatenation in `WebIMController.java` and failed to perform proper file type validation for uploaded files, leading to an Arbitrary File Upload vulnerability.
Fonte⚠️ https://github.com/mapl3miss/uckefuVul/blob/main/uckefu-upload.md
Utilizador
 maple147 (UID 83772)
Submissão07/04/2025 04h50 (há 1 Ano)
Moderação07/04/2025 08h37 (4 hours later)
EstadoAceite
Entrada VulDB303627 [zhangyanbo2007 youkefu 4.2.0 File Upload WebIMController.java id Travessia de Diretório]
Pontos15

Interested in the pricing of exploits?

See the underground prices here!