Description

util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an attacker places "../" in the file name, the file can be stored in an unintended directory because of Directory Traversal.

Remediation

References

https://github.com/lingochamp/FileDownloader/issues/1028

Related Vulnerabilities

CVE-2021-22060 Vulnerability in maven package org.springframework:spring-core

CVE-2019-17352 Vulnerability in maven package com.jfinal:jfinal

CVE-2023-37950 Vulnerability in maven package com.mabl.integration.jenkins:mabl-integration

CVE-2023-29506 Vulnerability in maven package org.xwiki.platform:xwiki-platform-security-authentication-default

CVE-2023-25330 Vulnerability in maven package com.baomidou:mybatis-plus-extension

Severity

Critical

Classification

CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Issue Tracking Third Party Advisory