CVE-2025-8965

CVE-2025-8965 affects linlinjava litemall up to version 1.8.0. The vulnerability is in the create function of AdminStorageController.java (litemall-admin-api) where manipulation of the File argument leads to unrestricted file upload. The attack can be performed remotely and the exploit has been d...