| 标题 | KodExplorer KodExplorer ≤ 4.51.03 Auth bypass, unrestricted file read, RCE |
|---|
| 描述 | Kodexplorer has an api endpoint auth bypass vuln, which allow evil user may access to api endpoint directly. Then builtin plugin OfficeLIve has an unrestricted file read vuln, which may allow evil user to read any file in the server, which will lead to RCE. |
|---|
| 来源 | ⚠️ https://note.zhaoj.in/share/oaYHbDTnPiU3 |
|---|
| 用户 | glzjin (UID 59815) |
|---|
| 提交 | 2023-12-11 17時59分 (3 年前) |
|---|
| 管理 | 2023-12-15 17時38分 (4 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 248221 [kalcaddle KodExplorer 直到 4.51.03 app.php index path 权限提升] |
|---|
| 积分 | 17 |
|---|