Description (CNA)
Lanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://codeantenna.com/a/DXQfemaZEH
- https://developpaper.com/lanling-oa-foreground-arbitrary-file-reading-vulnerability-exploitation/
ADP enrichment
No English description supplied.