CVE-2026-2953

Summary: CVE-2026-2953 affects Dromara UJCMS 101.2, specifically the path traversal in the deleteDirectory function of WebFileTemplateController.delete within the Template Handler. Documents describe remote exploitation with publicly disclosed exploits. Root cause is manipulation of deleteDirecto...

UJCMS 路径遍历漏洞

UJCMS is a Java open-source content management system developed by dromara. Version 101.2 of UJCMS has a path traversal vulnerability. This vulnerability stems from the deleteDirectory function in the WebFileTemplateController.delete file, which has issues with path traversal...