CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 è vulnerabile a Directory Traversal nell'interfaccia POST /viz/image, poiché il server utilizza direttamente MultipartFile.transferTo per salvare il file caricato in un percorso controllabile dall'utente e non effettua una verifica rigorosa del nome del file...

CVE-2025-56815

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name...

datart 安全漏洞

datart is an open source data visualization open platform by running-elephant. A security vulnerability exists in datart version 1.0.0-rc.3, which stems from the POST /viz/image interface not strictly validating filenames, which could lead to a directory traversal attack...