地图 / Insufficient checks in the file path parameter allow writing to unauthorized directories

Insufficient checks in the file path parameter allow writing to unauthorized directories

路径遍历 / External Control of File Name or Path / #3384615

厂商: SingleStore
严重程度: 低危
赏金: —
弱点: External Control of File Name or Path
研究员: @axolot23
披露日期: 2026-06-24
资产: backend.singlestore.com
CVE: —

该报告还没有中文解读。

时间线

2025-10-15报告提交
2026-06-24公开披露

阅读 HackerOne 原文 ↗作者 @axolot23 · 版权归作者与 SingleStore 所有

同类报告

curl External-Controlled Filename in `--url @file` Leads to Arbitrary File Overwritecurl · 2026-06-07 Arbitrary Configuration File Inclusion: via External Control of File Name or Pathcurl · 2025-11-10 Arbitrary File Read via Unsanitized curl Usage Results in Sensitive File Exposurecurl · 2025-06-27 CVE-2026-111951: curl -OJ truncate without filenamecurl · 2026-10-26