springboot-manager v1.6 is vulnerable to Arbitrary File Upload. The system does not filter the suffixes of uploaded files.

Published Feb 1, 2024 · Updated May 15, 2025 · Assigned by mitre