CVE-2023-41599

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...

CVE-2023-41599

creationtimestamp| type| source ---|---|--- 2023-09-19 07:28:59+00:00| seen| https://t.me/cibsecurity/70694...

CVE-2023-41599

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...

CVE-2023-41599

An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...

CVE-2023-41599

CVE-2023-41599 : JFinalCMS v5.0.0 contains a directory traversal vulnerability in /common/DownController.java. Unauthenticated attackers can read arbitrary files from the server via path traversal in the filekey parameter, potentially exposing credentials and sensitive CMS content. The connected ...