messense/aliyundrive-webdav

messense/aliyundrive-webdav

Releases117
Frequency6 days 15 hours
Last Release
Stars9.78K
阿里云盘 WebDAV 服务

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL

An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute arbitrary code via a crafted payload to the sid parameter in the action_query_qrcode component.