Waliwo obulabe obwategekeddwa nga ekikulu nnyo obuzuliddwa mu SingMR HouseRent 1.0. Obulabe buli ku omugaso singleUpload/upload ku fayiro src/main/java/com/house/wym/controller/AddHouseController.java. Okukozesa ku lugero Fayiro kivirako ebisanyizo ebyongerwako. Okukozesa CWE okulaga ekizibu kireetera CWE-434. Obunafu buno bwateekebwawo ku 08/01/2025 nga HouseRent allows arbitrary file uploads #13. Ekiteeso kino kisangibwa ku mukutu ogusobola okuddownloadinga ku github.com. Obunafu buno buzibwa nga CVE-2024-13212. Kisoboka okutandika okukola attack okuva wala. Obulambulukufu bw'eby'ekikugu buliwo. Okuddamu, waliwo ekikozesebwa ekiriwo. Ekikozesebwa kyamanyiddwa mu bantu era kisobola okukozesebwa. Mu kiseera kino, omutengo ogw’akaseera ku kikozesebwa kiyinza okuba nga giri mu USD $0-$5k mu kiseera kino. Kitegekeddwa nga ebikakasa eby'okukakasa obusobozi. Kisoboka okuddownloadinga exploit ku github.com. Ng’era 0-day, omuwendo ogusabibwa mu kifo ky’obutali mu mateeka gwali nga wa ddala $0-$5k. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

4 Okukyuusa · 99 Obubonero bw'ebikwata ku byuma