地图 / Unrestricted file upload when creating quotes allows for Stored XSS

Unrestricted file upload when creating quotes allows for Stored XSS

代码执行 / 危险文件上传 / #788397

厂商: Visma Public
严重程度: 未评级
赏金: $250
弱点: 危险文件上传
研究员: —
披露日期: —
资产: —
CVE: —

该报告还没有中文解读。

时间线

暂无时间线。

阅读 HackerOne 原文 ↗作者见原文 · 版权归作者与 Visma Public 所有

同类报告

Unrestricted file upload leads to Stored XSSVisma Public · — · $250 Unrestricted File Upload on https://partner.tiktokshop.com/wsos_v2/oec_partner/uploadTikTok · 2023-04-12 Tricking the "Create snippet" feature into displaying the wrong filetype can lead to RCE on Slack usersSlack · 2020-06-30 · $1,500 Unrestricted File Upload at ██████████Mars · 2024-02-19 [Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal JolokiaAiven Ltd · 2022-11-08 · $5,000 No validation to Image upload user can upload ( php APK zip files and can be used as storage purpose)Linktree · 2022-09-15 · $750

Unrestricted file upload when creating quotes allows for Stored XSS · 破甲 POJIA