EUVD-2018-10048

Malware in sbrugna...

Lemon Arbitrary File Upload Vulnerability

lemon is a set of Java language development using open source office OA system . A security vulnerability exists in the com/mossle/cdn/CdnController.java file in lemon version 1.9.0, which stems from the copyMultipartFileToFile method in CdnUtils that only checks the . / substring and fails to...