POJIA破甲
地图 / SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the server

SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the server

访问控制 / Missing Authorization / #3780695

厂商
SingleStore
严重程度
中危
赏金
—
弱点
Missing Authorization
研究员
@bisht-ji
披露日期
2026-07-13
资产
singlestoredb-server
CVE
—

该报告还没有中文解读。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @bisht-ji · 版权归作者与 SingleStore 所有

同类报告

Access token stealing.PlayStation · 2020-11-21 · $1,200JaaS SIP Gateway Authorization Bypass8x8 · 2026-08-12 · $500Unrestricted access to quiesce functionality in dss.api.playstation.com REST API leads to unavailability of applicationPlayStation · 2021-03-30 · $1,000Bypassing authorization of linked Instagram accountTikTok · 2022-09-30 · $170Missing authorization allows sales only user to record payment.Visma Public · — · $250Unauthorized access to choice.av.ru control panelAzbuka Vkusa · 2021-12-19