CVE-2021-45746

A Directory Traversal vulnerability exists in WeBankPartners wecube-platform 3.2.1 via the file variable in PluginPackageController.java...

CVE-2021-45746

CVE-2021-45746 is a directory traversal vulnerability in WeBankPartners wecube-platform 3.2.1, exploitable via the file variable in PluginPackageController.java. Public records (NVD and multiple security trackers) note path traversal can affect confidentiality (CVSS2/3.1 base scores: 5.0/7.5; vec...