Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Plenti <= 0.7.16 is vulnerable to code execution. Users uploading '.svelte' files with the /postLocal endpoint can define the file name as javascript codes. The server executes the uploaded file name in host, and cause code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Plenti 安全漏洞
Vulnerability Description
Plenti是Plentico开源的一个静态站点生成器。 Plenti 0.7.16及之前版本存在安全漏洞，该漏洞源于上传的.svelte文件名可能被执行为代码，从而导致代码执行。
CVSS Information
N/A
Vulnerability Type
N/A