GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Kevin Beaumont (gossithedog@cyberplace.social)'s status on Thursday, 18-Jan-2024 01:23:01 JSTKevin BeaumontKevin Beaumont
    in reply to

    I'm not aware of any vendor product yet that allows anonymous users to upload files, and process the files insecurely. There probably is one somewhere, and I imagine exploitation will land on that specific vendor.

    Greynoise blog is good btw. https://www.labs.greynoise.io/grimoire/2023-12-12-apache-struts-cve-2023-50164/

    In conversationabout a year ago from cyberplace.socialpermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: www.labs.greynoise.io
      GreyNoise Labs - Talk-A-Blog: Apache Struts2 CVE-2023-50164, File Upload Vulnerability Analysis
      from Remy
      A new vulnerability in Apache Struts has emerged! Follow us as we take a new twist on reviewing a vulnerability writeup.
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.