CVE-2024-13191

CVE-2024-13191 affects ZeroWdd myblog 1.0, specifically the upload function in src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The root cause is manipulation of the file argument, resulting in unrestricted uploads. The vulnerability is exploitable remotely and, per sources, t...