CVE-2022-4511

The CVE-2022-4511 entry pertains to RainyGao DocSys. The vulnerability affects the component com.DocSystem.controller.UserController#getUserImg and enables a path traversal via ../filedir. It is described as remote-exploitable and classified as critical/high impact across multiple sources, with e...

CVE-2022-4402

CVE-2022-4402 affects RainyGao DocSys 2.02.37, specifically the ZIP File Decompression Handler. The issue is a path traversal vulnerability triggered by using "../filedir" that can be exploited remotely. Multiple sources confirm the exploit has been publicly disclosed, and the vulnerability is la...