CVE-2022-24568

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery SSRF via user-supplied crafted input...

Server side request forgery (ssrf)

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery SSRF via user-supplied crafted input...

CVE-2022-24568

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery SSRF via user-supplied crafted input...

CVE-2022-24568

Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery SSRF via user-supplied crafted input...

CVE-2022-24568

CVE-2022-24568 affects Novel-plus v3.6.0, exposing a Server-Side Request Forgery (SSRF) flaw via user-supplied crafted input. In the provided documents, the vulnerability is described consistently across sources (NVD entry and Red Hat/PRION/OSV/CVE lists) as SSRF with high impact across confident...

PT-2022-16723 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-plus version 3.6.0 Description: The issue is related to Server-Side Request Forgery SSRF that can be triggered via user-supplied crafted input. Recommendations: For Novel-plus version 3.6.0, update to a version that fixes the Server-Sid...

CVE-2021-30048

Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus 小说精品屋-plus 3.5.1 allows attackers to read arbitrary files via the filePath parameter...

Directory traversal

Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus ?????-plus 3.5.1 allows attackers to read arbitrary files via the filePath parameter...

CVE-2021-30048

Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus 小说精品屋-plus 3.5.1 allows attackers to read arbitrary files via the filePath parameter...

CVE-2021-30048

Novel-plus (小说精品屋-plus) 3.5.1 contains a Directory Traversal in the fileDownload function of FileController.java that allows reading arbitrary files via the filePath parameter. This is documented across multiple sources (NVD, Red Hat, OSV, CVE lists, and PT Security) with no publicly disclosed fi...

PT-2021-18585 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-plus 小说精品屋-plus version 3.5.1 Description: The issue allows attackers to read arbitrary files via the filePath parameter in the fileDownload function located in com/java2nb/common/controller/FileController.java. This enables access to...