CVE-2023-40772

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component.

中CWE-23 全部 CVE

弱点类型

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component.

参考链接

https://github.com/dataease/dataease/issues/5864
https://github.com/dataease/dataease/issues/5864

赶在攻击者之前发现漏洞。

使用 GitHub 登录，一分钟内即可运行你的第一次审计。免费版无需信用卡。

开始免费审计查看价格