Unrated severityNVD Advisory· Published Sep 21, 2023· Updated Sep 24, 2024

CVE-2023-42280

Description

mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading.

Affected products

mee-admin/mee-admindescription
Funnyzpc/Mee Adminllm-fuzzy
Range: =1.5

Patches

Vulnerability mechanics

References

github.com/zaizainani/-Vulnerability-recurrence-sorting/blob/main/anyfiledown-en.pdfmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000