Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
YiJiuSmile kkFileViewOfficeEdit fileUpload unrestricted upload
Vulnerability Description
A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical. Affected by this issue is the function fileUpload of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
kkFileViewOfficeEdit 代码问题漏洞
Vulnerability Description
kkFileViewOfficeEdit是YiJiuSmile个人开发者的一个文件在线预览及OFFICE的在线编辑软件。 kkFileViewOfficeEdit 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd及之前版本存在代码问题漏洞，该漏洞源于文件/fileUpload中函数fileUpload对参数File的错误操作导致无限制上传。
CVSS Information
N/A
Vulnerability Type
N/A