提交 #473324: 1902756969 reggie 1.0 any file uploaded

The upload method in src/main/java/com/itheima/reggie/controller/CommonController.java only performs front-end validation on file suffixes, allowing attackers to directly upload any file

• 来源: ⚠️ https://github.com/1902756969/reggie/issues/2
• 用户: LVZC4 (UID 79688)
• 提交: 2025-01-02 08時47分 (2 年前)
• 管理: 2025-01-12 10時51分 (10 days later)
• 状态: 已接受
• VulDB条目: 291277 [1902756969 reggie 1.0 CommonController.java upload file 权限提升]
• 积分: 15