zdh_web 安全漏洞

zdhweb is a big data collection and extraction platform for zhaoyachao individual developers. A security vulnerability exists in zdhweb version 5.6.17 and earlier, which stems from insufficient file upload path validation, and may result in an authenticated user writing to an arbitrary file...

CVE-2025-65897: Improper Limitation of a Pathname to a Restricted Directory

zdhweb is a data collection, processing, monitoring, scheduling, and management platform. In zdhweb thru 5.6.17, insufficient validation of file upload paths in the application allows an authenticated user to write arbitrary files to the server file system, potentially overwriting existing files...