| शीर्षक | https://github.com/cld378632668/JavaMall JavaMall 1.0 Delete any file |
|---|
| विवरण | The MinioController.java interface of JavaMall 1.0 version has an arbitrary file deletion vulnerability. Its interface does not detect file names and file suffixes, nor does it have a method to prevent directory traversal. Attackers can delete arbitrary files by modifying the passed file names and file suffixes, causing serious consequences
In this call chain, there are no restrictions on file names and file suffixes, nor are there any restrictions. Through filtering, attackers can perform directory traversal and arbitrary file deletion by controlling the incoming file names. |
|---|
| स्रोत | ⚠️ https://github.com/zyhzheng500-maker/cve/blob/main/JavaMall%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4.md |
|---|
| उपयोगकर्ता | zyhsec (UID 93418) |
|---|
| सबमिशन | 23/12/2025 02:48 PM (10 महीनों पहले) |
|---|
| संयम | 04/01/2026 09:39 AM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 339482 [cld378632668 JavaMall तक 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0 MinioController.java delete objectName निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|