CVE-2021-48014

FineReport 9.0 is vulnerable to a path traversal vulnerability within the /WebReport/ReportServer design_save_svg operation. This flaw allows unauthenticated attackers to write arbitrary files by exploiting the filePath parameter. By sending a POST request containing directory traversal sequences...