| tiêu đề | Beijing Weili Digital Technology Co., Ltd 微力同步 v2.21.3 Arbitrary File Read |
|---|
| Mô tả | During a security assessment of the "微力同步 v2.21.3" version, I found an arbitrary file read vulnerability in the Web administration module. The core interface of this module does not implement effective identity authentication logic, which leads attackers to directly obtain the synchronization file path and construct requests by using the software Web management module to traverse and read synchronization files and system sensitive files in the target device. Corrective action must be taken immediately to ensure system safety. |
|---|
| Nguồn | ⚠️ https://github.com/jjjjj-zr/jjjjjzr/issues/8 |
|---|
| Người dùng | jjjjjzr (UID 92774) |
|---|
| Đệ trình | 21/11/2025 15:06 (cách đây 11 các tháng) |
|---|
| Kiểm duyệt | 06/12/2025 18:34 (15 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 334617 [Verysync 微力同步 đến 2.21.3 Web Administration f96956469e7be39d tiết lộ thông tin] |
|---|
| điểm | 0 |
|---|