CVE-2025-13810

Name of the Vulnerable Software and Affected Versions jsnjfz WebStack-Guns version 1.0

Description A path traversal issue exists in jsnjfz WebStack-Guns. The renderPicture function within the KaptchaController.java file (located in src/main/java/com/jsnjfz/manage/modular/system/controller/) is susceptible to manipulation, allowing for path traversal. This issue can be exploited remotely. The exploit is publicly available. The vendor was notified but did not respond.

Recommendations Apply a fix to the renderPicture function in the KaptchaController.java file to prevent path traversal.