CVE-2019-17538

Jiangnan Online Judge aka jnoj 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring...

PT-2019-15196

Name of the Vulnerable Software and Affected Versions Jiangnan Online Judge aka jnoj version 0.8.0 Description The issue allows for Directory Traversal, enabling file reading via a specific substring in the "web/polygon/problem/viewfile" endpoint, such as "id=1&name=../". Recommendations For...