5 matches found
CVE-2023-41599
An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...
CVE-2023-41599
creationtimestamp| type| source ---|---|--- 2023-09-19 07:28:59+00:00| seen| https://t.me/cibsecurity/70694...
CVE-2023-41599
An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...
CVE-2023-41599
An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...
CVE-2023-41599
An issue in the /common/DownController.java component of JFinalCMS v5.0.0 allows unauthenticated attackers to perform a directory traversal attack via the filekey parameter. This vulnerability can be exploited to read arbitrary files from the server, potentially exposing sensitive data such as da...