sindre
/
Beelance
關注 1
收藏 0
複製 0
程式碼 問題 6 合併請求 0 版本發佈 0 Wiki 活動
標籤 里程碑
建立問題

#20 File upload

開啟中
由 sindre 於 5 年之前建立 · 0 條評論
sindre 評論 5 年之前

Any user can upload a file without checking for file format orname validation. This allows a user to upload malicious files.

Any user can upload a file without checking for file format orname validation. This allows a user to upload malicious files.
sindre 新增至Optional vulnerabilities 里程碑 5 年之前
sindre added the
webpy
label 5 年之前
sindre added the
bug
label 5 年之前
sindre added the
security misconfiguration
label 5 年之前
sindre 5 年之前 修改了里程碑 Optional vulnerabilities 到 Required fixes
sindre 5 年之前 修改了里程碑 Required fixes 到 Optional vulnerabilities
登入 才能加入這對話。
未指定分支或標籤
分支列表 標籤
標籤
清除已選取標籤
broken access control
Broken access control vulnerability broken authentication
Broken authentication vulnerability bug
Something is not working csrf
Cross site request forgery vulnerability enhancement
New feature injection
Injection vulnerability insecure deserialization
Insecure deserialization vulnerability known vulnerability
Using components with known vulnerabilities logging
Insufficient logging vulnerability nginx
Concerns nginx security misconfiguration
Security misconfiguration vulnerability sensitive data exposure
Sensitive data exposure vulnerability webpy
Concerns the webpy framework
未選擇標籤
broken access control
broken authentication
bug
csrf
enhancement
injection
insecure deserialization
known vulnerability
logging
nginx
security misconfiguration
sensitive data exposure
webpy
里程碑
清除已選取里程碑
未選擇里程碑
Optional vulnerabilities
指派成員
取消指派成員
No Assignees
1 參與者
截止日期

未設定截止日期。

Dependencies

This issue currently doesn't have any dependencies.

Write Preview
Loading…
取消
儲存
尚未有任何內容
刪除分支 '%!s(MISSING)'

刪除分支是永久的。 此動作無法復原，繼續？

取消操作
確認操作