Archive
2 April 2023
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
High 7.3
sjqzhang go-fastdfs File Upload uploa upload path traversal
A vulnerability, which was classified as critical, has been found in sjqzhang go-fastdfs up to 1.4.3. Affected by this issue is the function upload of the file /group1/uploa of the component File Upload Handler. The manipulation leads to path traversal: '../f…
-
High 7.5
RuoYi vulnerable to arbitrary file download
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.