CVE-2023-4748

CVE-2023-4748 affects Yongyou UFIDA-NC (versions up to 20230807). The vulnerability is caused by manipulation of the filePath argument in PrintTemplateFileServlet.java, enabling path traversal. The issue can be exploited remotely and the public exploit is disclosed. No fixed version is documented...