aitangbao springboot-manager Filename upload cross site scripting

The vulnerability allows an attacker to inject arbitrary JavaScript code into the application via manipulation of the 'name' parameter when uploading files to the /sysFiles/upload endpoint. Successful exploitation could lead to session hijacking, defacement of the application, or redirection to malicious websites. The attacker could potentially steal sensitive user data or gain unauthorized access to the system. This vulnerability is particularly concerning as it is a cross-site scripting flaw, which is a common attack vector used to compromise web applications.

Organizations using aitangbao springboot-manager version 3.0 are at risk. Specifically, those who rely on the /sysFiles/upload functionality for file uploads and lack robust input validation are particularly vulnerable. Shared hosting environments where multiple users have access to the file upload functionality are also at increased risk.

• java / server:

grep -r 'name=.*;' /path/to/springboot-manager/logs/access.log

• generic web:

curl -I http://your-springboot-manager-instance.com/sysFiles/upload?name=<script>alert(1)</script>

• generic web:

curl -s http://your-springboot-manager-instance.com/sysFiles/upload?name=<script>alert(1)</script> | grep alert

1. 2025-03-11Disclosure

   disclosure

1. Gereserveerd2025-03-11
2. Gepubliceerd2025-03-11
3. EPSS bijgewerkt2026-04-02

The primary mitigation is to upgrade to version 3.0.1 of springboot-manager, which addresses the vulnerability. If an immediate upgrade is not feasible, consider implementing input validation and sanitization on the 'name' parameter within the /sysFiles/upload endpoint. A Web Application Firewall (WAF) can be configured to block requests containing suspicious characters or patterns in the filename. Regularly review and update security policies to prevent similar vulnerabilities in the future.