Novel Boutique House-plus Security Vulnerabilities and Issues — Novel Boutique House-plus CVE List

Lucene search

Novel Boutique House-plus ProjectNovel Boutique House-plus

1 matches found

CVE•added 2021/04/29 5:15 p.m.•41 views

CVE-2021-30048

Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allows attackers to read arbitrary files via the filePath parameter.

5.3CVSS5.2AI score0.01082EPSS