地图 / Import File Converter - local File inclusion

Import File Converter - local File inclusion

路径遍历 / Unlabeled / #341992

厂商: ExpressionEngine
严重程度: 低危 · CVSS 3.4
赏金: —
弱点: Unlabeled
研究员: @0xsp
披露日期: 2018-05-17
资产: —
CVE: —

该报告还没有中文解读。

时间线

2018-04-23报告提交
2018-05-17公开披露

阅读 HackerOne 原文 ↗作者 @0xsp · 版权归作者与 ExpressionEngine 所有

同类报告

Directory Traversal in uftpd 2.6-2.10██████ · —Local files reading from the web using `brave://`Brave Software · 2018-09-25 Directory Traversal + HTTP Paramater Pollution leaking SQL/LDAP credentialsSoleo · —Local files reading using `link[rel="import"]`Brave Software · 2018-09-29 Path traversal leading to limited CSRF on GET requests on two endpointsHackerOne · 2019-04-05 Arbitrary file read from Cloudflare Pages build environmentCloudflare Public Bug Bounty · 2024-02-23