CVE-2018-18315
15.10.2018, 04:29
com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter.Enginsight
| Vendor | Product | Version |
|---|---|---|
| mossle | lemon | 1.9.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration