2 matches found
CVE-2022-28462
novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.
CVE-2021-42967
Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files.