PT-2026-56250

Name of the Vulnerable Software and Affected Versions DataEase versions prior to 2.10.24 Description The font management module allows authenticated users to submit an arbitrary fileTransName when creating a font record. When the record is subsequently deleted, the backend concatenates this store...