vlife-base has Path Traversal vulnerability

A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to...

CVE-2025-13266

A path traversal vulnerability affects wwwlike vlife up to 2.0.1 in the SysFileApi.create path, due to manipulation of the fileName argument in vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java. The issue enables remote exploitation and is publicly disclosed. Multiple sources describe t...