Description
An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory traversal in linlinjava/litemall/wx/web/WxStorageController.java in the litemall-wx-api component.
Unscored
CVE-2018-18434
EUVD-2018-10162GHSA-54j3-v48h-cjxv
An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory traversal in linlinjava/litemall/wx/web/Wx…
Published Oct 17, 2018 · Updated Aug 5, 2024 · Assigned by mitre