EUVD-2026-76973

A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component Avatar Upload. This manipulation of the argument File causes unrestricted upload. The attack is possible to be carried out remotely. The...

CVE-2026-90500

lenve vhr 1.0-SNAPSHOT is affected by an unrestricted file upload vulnerability in the Avatar Upload component, specifically in the function FastDFSUtils.upload within the file /hr/userface . The root cause is improper validation of the File argument, allowing remote attackers with low privileges...