codeskyblue / codeskyblue/gohttpserver
文件上传权限有漏洞
Open
- Dominant language
- JavaScript
- Stars
- 2.8k
- Forks
- 583
- PR merge metrics
- No merged PRs in 30d
Description
若把文件夹设置成可以上传不可以删除，然后手动上传一个包含upload: true delete: true的.ghs.yml 文件进去，文件夹权限就会被改变，从而可以上传删除整个文件系统
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reproducing the reported case: configure a folder to allow uploads but not deletion, then upload a .ghs.yml containing upload: true and delete: true. Trace how the uploaded configuration affects folder permissions, and consider the issue done when such a file cannot escalate upload or delete access to the filesystem.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authorization, backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100