Description (CNA)
A weakness has been identified in xuhuisheng lemon up to 1.13.0. This affects the function uploadImage of the file CmsArticleController.java of the component com.mossle.cms.web.CmsArticleController.uploadImage. This manipulation of the argument Upload causes unrestricted upload. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| xuhuisheng / lemon | affected 1.0; affected 1.1; affected 1.2; affected 1.3; affected 1.4; affected 1.5; affected 1.6; affected 1.7; affected 1.8; affected 1.9; affected 1.10; affected 1.11; affected 1.12; affected 1.13.0 |
CWE
CWE-434, CWE-284
References
- https://vuldb.com/?id.321242
- https://vuldb.com/?ctiid.321242
- https://vuldb.com/?submit.633593
- https://github.com/xuhuisheng/lemon/issues/212
- https://github.com/xuhuisheng/lemon/issues/212#issue-3317490086
ADP enrichment
No English description supplied.