提交 #558283: https://gitee.com/playeduxyz/playedu v1.8 SSRF
| 标题 | https://gitee.com/playeduxyz/playedu v1.8 SSRF |
|---|---|
| 描述 | I found that an SSRF vulnerability can be triggered at the image added by the user in the admin background, which may cause information leakage |
| 来源 | ⚠️ https:/ |
| 用户 | keke (UID 83676) |
| 提交 | 2025-04-15 13時13分 (1 年前) |
| 管理 | 2025-04-27 15時58分 (12 days later) |
| 状态 | 已接受 |
| VulDB条目 | 306365 [playeduxyz PlayEdu 开源培训系统 直到 1.8 User Avatar create avatar 权限提升] |
| 积分 | 15 |