Отправить #552369: https://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 Arbitrary File UploadИнформация

Названиеhttps://github.com/zhangyanbo2007/youkefu youkefu 4.2.0 Arbitrary File Upload
ОписаниеIt used improper path concatenation in `WebIMController.java` and failed to perform proper file type validation for uploaded files, leading to an Arbitrary File Upload vulnerability.
Источник⚠️ https://github.com/mapl3miss/uckefuVul/blob/main/uckefu-upload.md
Пользователь
 maple147 (UID 83772)
Представление07.04.2025 04:50 (1 Год назад)
Модерация07.04.2025 08:37 (4 hours later)
Статуспринято
Запись VulDB303627 [zhangyanbo2007 youkefu 4.2.0 File Upload WebIMController.java id обход каталога]
Баллы15

Do you need the next level of professionalism?

Upgrade your account now!