Unauthenticated Arbitrary File Upload in Quick Playground Sync REST API

Quick Playground's sync REST endpoints compared the sync code loosely and echoed the stored code back, and the image-upload endpoint wrote a request-supplied filename and base64 body to disk without validation. An unauthenticated attacker could bypass the check, upload a PHP file outside the upload directory via path traversal and execute code on... Weiterlesen: Unauthenticated Arbitrary File Upload in Quick Playground Sync REST API