CVE-2025-6731 yzcheng90 X-SpringBoot APK File apk uploadApk path traversal

A vulnerability was found in yzcheng90 X-SpringBoot up to 5.0 and classified as critical. Affected by this issue is the function uploadApk of the file /sys/oss/upload/apk of the component APK File Handler. The manipulation of the argument File leads to path traversal. The attack may be launched...

CVE-2025-6731: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in yzcheng90 X-SpringBoot up to 5.0 and classified as critical. Affected by this issue is the function uploadApk of the file /sys/oss/upload/apk of the component APK File Handler. The manipulation of the argument File leads to path traversal. The attack may be launched...

PT-2025-27014 · Yzcheng90 · X-Springboot

Name of the Vulnerable Software and Affected Versions: yzcheng90 X-SpringBoot versions up to 5.0 Description: A critical issue was found in the function uploadApk of the file /sys/oss/upload/apk of the component APK File Handler. The manipulation of the argument File leads to path traversal. The...