PT-2019-15098
CVE-2019-17352
·
تاريخ النشر
2019-10-08
·
تاريخ التحديث
2022-05-25
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
JFinal cos before 2019-08-13
JFinal version 4.4
Description
The issue allows bypassing the
isSafeFile() function, enabling the upload of any file type. For instance, a .jsp file can be uploaded, stored, and potentially deleted immediately, but certain exceptions may prevent this deletion.Recommendations
For JFinal cos before 2019-08-13, consider updating to a version released after 2019-08-13 to address the issue.
For JFinal version 4.4, consider updating to a version that incorporates the fix for the
isSafeFile() function bypass vulnerability.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾