地图 / SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the server

SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the server

访问控制 / Missing Authorization / #3780695

厂商: SingleStore
严重程度: 中危
赏金: —
弱点: Missing Authorization
研究员: @bisht-ji
披露日期: 2026-07-13
资产: singlestoredb-server
CVE: —

该报告还没有中文解读。

时间线

2026-06-03报告提交
2026-07-13公开披露

阅读 HackerOne 原文 ↗作者 @bisht-ji · 版权归作者与 SingleStore 所有

同类报告

Access token stealing.PlayStation · 2020-11-21 · $1,200 JaaS SIP Gateway Authorization Bypass8x8 · 2026-08-12 · $500 Unrestricted access to quiesce functionality in dss.api.playstation.com REST API leads to unavailability of applicationPlayStation · 2021-03-30 · $1,000 Bypassing authorization of linked Instagram accountTikTok · 2022-09-30 · $170 Missing authorization allows sales only user to record payment.Visma Public · — · $250 Unauthorized access to choice.av.ru control panelAzbuka Vkusa · 2021-12-19

SELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the server · 破甲 POJIA