github-featured / dataelement--bisheng

发布

0 发布 120 Git 标签

RSS 订阅源
  • v2.4.0 1ac75048a5
    比较

    fix: Summary

    frostbyte_neo 发布于 2026-05-11 02:36:23 +00:00 | 2906 次提交 在此版本后已推送到 main

    When Linsight routing is enabled, any registered user can cause any file read

    Details
    The vulnerability lies in the conversion of MD to PDF format. Since the protocol and format of the referenced links in MD are not checked in the code, the file protocol can be constructed to read the current system files

    下载附件