High severity7.5NVD Advisory· Published Sep 21, 2023· Updated Jun 17, 2026

CVE-2023-42280

Description

mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading.

Affected products

Mee Admin/mee-adminllm-create2 versions
=1.5+ 1 more
- (no CPE)range: =1.5
- (no CPE)
Springernature/Mee Admin
cpe:2.3:a:springernature:mee-admin:1.5:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/zaizainani/-Vulnerability-recurrence-sorting/blob/main/anyfiledown-en.pdfnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000