| 标题 | letseeqiji gorobbs 1.0.8 Arbitrary File Write with Path Traversal |
|---|
| 描述 | This endpoint allows users to write arbitrary files into any directory. Due to the lack of input sanitization, it is vulnerable to directory traversal, enabling attackers to write files outside the intended directory structure.
Details can be found in https://github.com/letseeqiji/gorobbs/issues/18. |
|---|
| 来源 | ⚠️ https://github.com/letseeqiji/gorobbs/issues/18 |
|---|
| 用户 | Tritium (UID 50779) |
|---|
| 提交 | 2025-07-02 10時19分 (1 年前) |
|---|
| 管理 | 2025-07-11 10時37分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 316095 [letseeqiji gorobbs 直到 1.0.8 API user.go ResetUserAvatar filename 目录遍历] |
|---|
| 积分 | 18 |
|---|