-
-
Notifications
You must be signed in to change notification settings - Fork 248
该项目存在多个严重安全漏洞 #46
Copy link
Copy link
Open
Labels
bugSomething is not working as expected or causes incorrect behavior.Something is not working as expected or causes incorrect behavior.
Description
Metadata
Metadata
Assignees
Labels
bugSomething is not working as expected or causes incorrect behavior.Something is not working as expected or causes incorrect behavior.
总结
该项目存在多个严重安全漏洞,主要集中在:
✅ 命令注入 - 需要输入验证
✅ 不安全反序列化 - 需要类型白名单
✅ 缺少 TLS 验证 - 需要证书验证
✅ 路径遍历 - 需要文件名清理
✅ 管理员权限 - 需要权限最小化
✅ XXE 注入 - 需要禁用外部实体