Description
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter.
Remediation
References
https://gitee.com/heyewei/JFinalcms/issues/I7WGC6
Related Vulnerabilities
CVE-2023-33202 Vulnerability in maven package org.bouncycastle:bc-fips-debug
CVE-2020-7774 Vulnerability in maven package org.webjars.npm:y18n
CVE-2021-21391 Vulnerability in npm package @ckeditor/ckeditor5-paste-from-office
CVE-2023-32314 Vulnerability in maven package org.webjars.npm:vm2
CVE-2023-43498 Vulnerability in maven package org.jenkins-ci.main:jenkins-core