search

AiursoftWeb / AiurDrive

AiurDrive is a free file sharing service. You can upload your files here and share them with others. Mirror of https://gitlab.aiursoft.cn/aiursoft/aiurdrive
https://drive.aiursoft.cn
Other
12 stars 6 forks source link

关于%号导致的严重漏洞 #8

Closed Perlistan closed 3 years ago

Perlistan commented 3 years ago

你好安怼，还是我 TAGOST ！

1、创建【%25】文件夹时会导致无法打开和删除，显示未发现资源 2、上传【%】开头的无后缀文件会导致一样的结果

Anduin2017 commented 3 years ago

Ack. Will fix tomorrow.

Anduin2017 commented 3 years ago

Fixed on staging environment. Please verify at: https://drive.staging.aiursoft.com