CVE-2021-42967

2022-05-1311:05:10

mitre

www.cve.org

file upload

malicious files

jsp

security vulnerability

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

62.0%

JSON

Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files.

References

github.com/201206030/novel-plus/issues/62