CVE-2026-2953

A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirectory of the file WebFileTemplateController.delete of the component Template Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The exploit has been disclosed...

UJCMS 路径遍历漏洞

UJCMS is a Java open-source content management system developed by dromara. Version 101.2 of UJCMS has a path traversal vulnerability. This vulnerability stems from the deleteDirectory function in the WebFileTemplateController.delete file, which has issues with path traversal...