#25 File names can overwrite other resources

开启中
sindre5 年前创建 · 0 条评论
sindre 评论于 5 年前

When uploading a file it can overwrite other files, even those ondifferent levels due to lack of input validation. This is differentfrom uploading, as even without checking for file name, itshould be checked that it won’t overwrite another file.

When uploading a file it can overwrite other files, even those ondifferent levels due to lack of input validation. This is differentfrom uploading, as even without checking for file name, itshould be checked that it won’t overwrite another file.
sindre 5 年前 添加了里程碑 Required fixes
sindre 添加了标签
webpy
5 年前
sindre 添加了标签
bug
5 年前
sindre 添加了标签
security misconfiguration
5 年前
sindre 5 年前 修改了里程碑从 Required fixesOptional vulnerabilities
登陆 并参与到对话中。
正在加载...
取消
保存
这个人很懒,什么都没留下。