| Título | enilu web-flash 1.0 Arbitrary File Upload |
|---|
| Descrição | In src/main/java/cn/enilu/flash/api/controller/FileController/upload,the code here does not check the legality of the file suffix uploaded，which caused unexpected files to be uploaded |
|---|
| Fonte | ⚠️ https://gitee.com/enilu/web-flash/issues/ICAXTM |
|---|
| Utilizador | electroN1c (UID 85481) |
|---|
| Submissão | 27/05/2025 12h03 (há 1 Ano) |
|---|
| Moderação | 03/06/2025 11h39 (7 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 310959 [enilu web-flash 1.0 File Upload upload fileService.upload file Script de Site Cruzado] |
|---|
| Pontos | 15 |
|---|