eladmin · Issues· 23 open

Courtesy notice for an independent Java 21 and Spring Boot 4.1.1 port

[Security] JWT userId 未与 Redis 在线会话绑定，导致跨用户身份混淆与条件性垂直越权

[Security] Missing authorization on Tools (Email / Alipay) and Code-Generator controllers enables vertical privilege escalation

[Security] Broken Access Control - UserController

[Security] Broken Access Control - LocalStorageController

[Security] OS command injection in deploy server-reduction (`appName`)

[Security] SSRF via attacker-controlled JDBC URL in database maintenance endpoints

[Security] Arbitrary file write via code-generator `tableName` (path traversal)

The version of the MySQL connector used by eladmin v2.6 is outdated, which makes it vulnerable to JDBC deserialization attacks.

[Security]Directory Traversal in File Upload Path Construction Allows Write Outside the Intended Upload Directory

Arbitrary file read via /api/database/testConnect: the sanitizeJdbcUrl blocklist is bypassable

[Security]Users with low privileges can reset the password of any user.

[Security] Server-Side Request Forgery (SSRF) via Insecure JDBC Connection Testing

[Secruity] Command Injection via SSH Script Injection in App Management in elunez_eladmin

建议修改tableName传参方式