Skip to content
OpenAdvisories

Vendor

xiaoyunjie

2 known vulnerabilities.

Products

openvpn-cms-flask 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2025-6776

    xiaoyunjie openvpn-cms-flask File Upload controller.py upload path traversal

    A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects the function Upload of the file app/plugins/oss/app/controller.py of the component File Upload. The manipulation of the argument image lea…

    xiaoyunjie openvpn-cms-flask