Vulnerabilities

CVE-2023-50449 | BDVDB-2026-218898 Detail

Description#

JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gitee.com/heyewei/JFinalcms/issues/I7WGC6

Exploit#

No public exploit known

History#

Version 12023-12-10Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.