← 返回地图破甲

Insufficient checks in the file path parameter allow writing to unauthorized directories

路径遍历 / External Control of File Name or Path / #3384615

厂商
SingleStore
严重程度
低危
赏金
—
弱点
External Control of File Name or Path
研究员
@axolot23
披露日期
2026-06-24
资产
backend.singlestore.com
CVE
—

该报告还没有中文解读。

时间线

阅读 HackerOne 原文 ↗作者 @axolot23 · 版权归作者与 SingleStore 所有

同类报告

curl External-Controlled Filename in `--url @file` Leads to Arbitrary File Overwritecurl · 2026-06-07Arbitrary Configuration File Inclusion: via External Control of File Name or Pathcurl · 2025-11-10Arbitrary File Read via Unsanitized curl Usage Results in Sensitive File Exposurecurl · 2025-06-27CVE-2026-111951: curl -OJ truncate without filenamecurl · 2026-10-26