CVE-2018-18315

com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter...

CVE-2018-18315

com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter...

PT-2018-14399

Name of the Vulnerable Software and Affected Versions lemon version 1.9.0 Description The issue allows attackers to upload arbitrary files due to insufficient validation in the copyMultipartFileToFile method within CdnUtils. Specifically, it only checks for a ../ substring and does not validate t...