IceCMS icon indicating copy to clipboard operation
IceCMS copied to clipboard

Published 20 hours ago • verified publisher icon Thecosy

Arbitrary file upload

Open QuanYex opened this issue 1 year ago • 0 comments

In the updateimage path of the imageApi file, the upload file type is not restricted, causing any file to be uploaded. At the same time, it is set to store the file locally if there is no remote bucket.

APIPath：IceWk-vues/src/api/updateImage.js updateImage Path： IceWk-ment/src/main/java/com/ttice/icewkment/controller/ImageApi.java

3 4

QuanYex avatar Nov 16 '23 07:11 QuanYex