Dev blog v1.0 allows to exploit an XSS...... CVE-2023-6142
-
AV
AC
AU
C
I
A
发布：
2023-11-21
修订：
2023-11-29
Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames. With this an attacker can upload a malicious HTML file, then guess the filename of the uploaded file and send it to a potential victim.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
