Lyang

An issue in the UEditor Widget component allows for unrestricted file upload. The flaw exists within the `UeditorAction::init()` function located in the `backend/widgets/ueditor/UeditorAction.php` file, which can be exploited remotely.

A server-side request forgery exists in the UEditor component within the `catchImage()` function of the `backend/widgets/ueditor/Uploader.php` file. A remote attacker can exploit this by manipulating the `source[]` argument, allowing the server to make unauthorized requests to internal or external resources.

An issue exists in the Cookie Validation component within the file environments/prod/backend/config/main-local.php. The manipulation of the `cookieValidationKey` argument leads to the use of a hard-coded cryptographic key, which allows for remote attacks.