5 matches found
CVE-2023-41599
An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal...
5.3CVSS7AI score0.12364EPSS
SaveExploits1
CVE-2023-41599
creationtimestamp| type| source ---|---|--- 2023-09-19 07:28:59+00:00| seen| https://t.me/cibsecurity/70694...
5.3CVSS5.5AI score0.12364EPSS
SaveExploits1References1
CVE-2023-41599
An issue in the /common/DownController.java component of JFinalCMS v5.0.0 allows unauthenticated attackers to perform a directory traversal attack via the filekey parameter. This vulnerability can be exploited to read arbitrary files from the server, potentially exposing sensitive data such as da...
5.3CVSS5.4AI score0.12364EPSS
SaveIn wildExploits1References1Affected Software1
20