| Название | rebuild rebuild <= 3.5.5 SSRF |
|---|
| Описание | There is an SSRF vulnerability in the FileDownLoader#readRawText method. Since the URL parameters are controllable, an http request is initiated to the specified url and the request result is returned. The attacker uses this vulnerability to detect intranet services and ports and read related files. |
|---|
| Источник | ⚠️ https://www.yuque.com/mailemonyeyongjuan/tha8tr/yemvnt5uo53gfem5 |
|---|
| Пользователь | lemono (UID 59906) |
|---|
| Представление | 27.01.2024 05:51 (2 лет назад) |
|---|
| Модерация | 29.01.2024 11:47 (2 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 252290 [Rebuild до 3.5.5 HTTP Request readRawText url эскалация привилегий] |
|---|
| Баллы | 17 |
|---|