漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
gopeak MasterLab User.php base64ImageContent unrestricted upload
Vulnerability Description
A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent of the file app/ctrl/User.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. VDB-249150 is the identifier assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
Sven gopeak masterlab 代码问题漏洞
Vulnerability Description
Sven gopeak masterlab是 Sven开源的一个应用软件。提供简单高效、基于敏捷开发的项目管理工具。 Sven gopeak masterlab 3.3.10 版本及之前版本存在代码问题漏洞,该漏洞源于app/ctrl/User.php 的 base64ImageContent 函数存在问题。
CVSS Information
N/A
Vulnerability Type
N/A