| Title | EasyAdmin EasyAdmin commit 16501835952c366ffaee465bd73569c4fa340113 Unauthorized SSRF |
|---|
| Description | `src/main/java/com/laker/admin/module/sys/controller/IndexController.java` This unauthorized route has two problems, one is SSRF and the other is local image file reading.
https://gitee.com/lakernote/easy-admin/issues/I98YSR |
|---|
| Source | ⚠️ https://gitee.com/lakernote/easy-admin/issues/I98YSR |
|---|
| User | linyz-tel (UID 44909) |
|---|
| Submission | 03/16/2024 03:51 (3 years ago) |
|---|
| Moderation | 03/22/2024 11:50 (6 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 257718 [lakernote EasyAdmin up to 20240315 IndexController.java thumbnail url server-side request forgery] |
|---|
| Points | 16 |
|---|