Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
严重 CVSS 9.8
摘要
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
Lint 边界警告 (8)
以下是本次研判 lint 阶段发现的非阻塞性警告（如引用 URL 未在白名单内）。这些不影响漏洞条目可用性，仅为透明度披露（参 DR-002）。
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.securityfocus.com/bid/105679 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.securityfocus.com/bid/106629 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.vapidlabs.com/advisory.php?v=204 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://wpvulndb.com/vulnerabilities/9136 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.securityfocus.com/bid/105679 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.securityfocus.com/bid/106629 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: http://www.vapidlabs.com/advisory.php?v=204 -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://wpvulndb.com/vulnerabilities/9136
数据来源
- NVD DATABASE
原始链接
- http://www.securityfocus.com/bid/105679 Third Party Advisory
- http://www.securityfocus.com/bid/106629 Third Party Advisory
- http://www.vapidlabs.com/advisory.php?v=204 Exploit
- https://wpvulndb.com/vulnerabilities/9136 Exploit
- https://www.exploit-db.com/exploits/45790/ Exploit
- https://www.exploit-db.com/exploits/46182/ Exploit
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Patch
- http://www.securityfocus.com/bid/105679 Third Party Advisory
- http://www.securityfocus.com/bid/106629 Third Party Advisory
- http://www.vapidlabs.com/advisory.php?v=204 Exploit
- https://github.com/psolom/RichFilemanager/issues/354
- https://github.com/psolom/RichFilemanager/issues/412
- https://wpvulndb.com/vulnerabilities/9136 Exploit
- https://www.exploit-db.com/exploits/45790/ Exploit
- https://www.exploit-db.com/exploits/46182/ Exploit
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Patch
时间线
- nvd_ingest NVD