Description
com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter.
Remediation
References
https://github.com/xuhuisheng/lemon/issues/175
Related Vulnerabilities
CVE-2021-38542 Vulnerability in maven package org.apache.james:james-server
CVE-2021-37701 Vulnerability in npm package tar
CVE-2023-34247 Vulnerability in npm package @keystone-6/auth
CVE-2021-23363 Vulnerability in npm package kill-by-port
CVE-2023-34610 Vulnerability in maven package com.cedarsoftware:json-io