4 matches found
EUVD-2026-75209
An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended storage directory via the directory parameter in POST /app-api/infra/file/upload...
CVE-2026-71805
An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended storage directory via the directory parameter in POST /app-api/infra/file/upload...
CVE-2026-71805
CVE-2026-71805 affects LZ-litchi 1.0.0 , an arbitrary file upload and path traversal vulnerability in the directory parameter of POST /app-api/infra/file/upload. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended storage directory, rated CVSS 9.8 (Crit...
CVE-2026-71805
An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0. Unauthenticated remote attackers can upload arbitrary files and write them outside the intended storage directory via the directory parameter in POST /app-api/infra/file/upload...