Critical severity9.8NVD Advisory· Published May 13, 2022· Updated Jun 17, 2026
CVE-2021-42967
CVE-2021-42967
Description
Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files.
Affected products
3- cpe:2.3:a:xxyopen:novel-plus:-:*:*:*:*:*:*:*
- novel-plus/novel-plusdescription
Patches
Vulnerability mechanics
References
1- github.com/201206030/novel-plus/issues/62nvdExploitIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.