提交 #469689: donglight bookstore 1.0 SSRF
| 标题 | donglight bookstore 1.0 SSRF |
|---|---|
| 描述 | The getHtml method in src/main/java/org/zdd/bookstore/rawl/HttpUtil. java does not filter the incoming URL parameters, allowing attackers to determine whether the internal network service is enabled based on the response time |
| 来源 | ⚠️ https:/ |
| 用户 | LVZC1 (UID 76422) |
| 提交 | 2024-12-27 15時08分 (2 年前) |
| 管理 | 2025-01-08 15時30分 (12 days later) |
| 状态 | 已接受 |
| VulDB条目 | 290787 [donglight bookstore电商书城系统说明 1.0.0 HttpUtil.java getHtml url 权限提升] |
| 积分 | 16 |