Description
Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allows attackers to read arbitrary files via the filePath parameter.
Unscored
CVE-2021-30048
EUVD-2021-16992GHSA-8hjc-cwh9-jfpx
Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allo…
Published Apr 29, 2021 · Updated Aug 3, 2024 · Assigned by mitre