| Title | rebuild rebuild rebuild <= 3.5.5 XSS |
|---|
| Description | In the FileDownLoader#proxyDownload method, because the url parameters are controllable, the error report is echoed to the error page, resulting in an xss vulnerability. |
|---|
| Source | ⚠️ https://www.yuque.com/mailemonyeyongjuan/tha8tr/gdd3hiwz8uo6ylab |
|---|
| User | lemono (UID 59906) |
|---|
| Submission | 01/27/2024 05:46 (2 years ago) |
|---|
| Moderation | 01/29/2024 11:47 (2 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 252289 [Rebuild up to 3.5.5 /filex/proxy-download getStorageFile url cross site scripting] |
|---|
| Points | 15 |
|---|