Отправить #628090: https://ems.acrel.cn/ Environmental Monitoring Cloud Platform 1 Unrestricted UploadИнформация

Названиеhttps://ems.acrel.cn/ Environmental Monitoring Cloud Platform 1 Unrestricted Upload
ОписаниеThe /NewsManage/UploadNewsImg interface does not impose strict restrictions on uploaded files, resulting in a vulnerability that allows arbitrary file uploads.
Источник⚠️ https://www.notion.so/upload-23e9bb66b0a58088a9b4fcaea56a857f?source=copy_link
Пользователь
 Anonymous User
Представление04.08.2025 08:57 (9 месяцы назад)
Модерация17.08.2025 16:01 (13 days later)
Статуспринято
Запись VulDB320421 [Acrel Environmental Monitoring Cloud Platform до 20250804 UploadNewsImg Файл эскалация привилегий]
Баллы12

Do you know our Splunk app?

Download it now for free!