提交 #585342: enilu web-flash 1.0 Arbitrary File Upload
| 标题 | enilu web-flash 1.0 Arbitrary File Upload |
|---|---|
| 描述 | In src/main/java/cn/enilu/flash/api/controller/FileController/upload,the code here does not check the legality of the file suffix uploaded，which caused unexpected files to be uploaded |
| 来源 | ⚠️ https:/ |
| 用户 | electroN1c (UID 85481) |
| 提交 | 2025-05-27 12時03分 (1 年前) |
| 管理 | 2025-06-03 11時39分 (7 days later) |
| 状态 | 已接受 |
| VulDB条目 | 310959 [enilu web-flash 1.0 File Upload upload fileService.upload file 跨网站脚本] |
| 积分 | 15 |