PT-2026-20522
CVE-2026-2672
·
Published
2026-02-18
·
Updated
2026-03-03
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Tsinghua Unigroup Electronic Archives System version 3.2.210802(62532)
Description
A security flaw exists in the Download function of the Tsinghua Unigroup Electronic Archives System. A path traversal issue is present due to manipulation of the
path argument in the /Search/Subject/downLoad file. This allows for remote attacks. The exploit for this issue has been publicly released. The vendor was notified but did not respond.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾