CVE-2021-42967

CVE-2021-42967 affects novel-plus; unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java allows uploading JSP files across all versions. Root cause is lack of file upload restrictions, enabling remote attackers to plant hostile JSPs (impact: part...

Directory traversal

Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus ?????-plus 3.5.1 allows attackers to read arbitrary files via the filePath parameter...

NovelPlus 路径遍历漏洞

NovelPlus is an application. An open source mobile social application and idea publishing platform. NovelPlus suffers from a path traversal vulnerability that originates in the fileDownload function of com/java2nb/common/controller/FileController.java...