| Название | letseeqiji gorobbs 1.0.8 Arbitrary File Write with Path Traversal |
|---|
| Описание | This endpoint allows users to write arbitrary files into any directory. Due to the lack of input sanitization, it is vulnerable to directory traversal, enabling attackers to write files outside the intended directory structure.
Details can be found in https://github.com/letseeqiji/gorobbs/issues/18. |
|---|
| Источник | ⚠️ https://github.com/letseeqiji/gorobbs/issues/18 |
|---|
| Пользователь | Tritium (UID 50779) |
|---|
| Представление | 02.07.2025 10:19 (11 месяцы назад) |
|---|
| Модерация | 11.07.2025 10:37 (9 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 316095 [letseeqiji gorobbs до 1.0.8 API user.go ResetUserAvatar filename обход каталога] |
|---|
| Баллы | 18 |
|---|