Tallguy297 / SimpleHTTPServerWithUpload

Simple HTTP Server With Upload written in Python 3
131 stars 58 forks source link

an arbitrary file upload vulnerability #14

Open lomo5 opened 3 months ago

lomo5 commented 3 months ago

Based on the description of this article , it is suggested that the parameter re.findall() at line 127 be changed.Change to: fn = re.findall(r'Content-Disposition.*name="file"; filename="([^\/]*)"', line)