Luckyframeweb@3.5.2 Security Vulnerabilities and Issues — Luckyframeweb@3.5.2 CVE List

Lucene search

LuckyframeLuckyframeweb3.5.2

2 matches found

CVE•added 2024/05/23 5:15 p.m.•72 views

CVE-2024-35081

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in the fileDownload method.

7.5CVSS7.4AI score0.00278EPSS

CVE•added 2024/05/06 8:15 p.m.•42 views

CVE-2024-33118

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController.

7.5CVSS7.3AI score0.0013EPSS