जमा करें #753383: Tsinghua Unigroup Electronic Archives System 3.2.210802(62532) File and Directory Information Exposureजानकारी

शीर्षकTsinghua Unigroup Electronic Archives System 3.2.210802(62532) File and Directory Information Exposure
विवरणAn arbitrary file read vulnerability has been identified in Tsinghua Unigroup Electronic Archives System version 3.2.210802 (build 62532).Due to insufficient validation of file path input in the download functionality, a remote attacker can read arbitrary files accessible to the application.Successful exploitation may lead to the disclosure of sensitive internal information, including but not limited to system configuration files, archived documents, and application secrets.
स्रोत⚠️ https://github.com/luoye197-prog/cve-ziguang-fileread2
उपयोगकर्ता
 lanmeik (UID 95270)
सबमिशन06/02/2026 11:07 AM (8 महीनों पहले)
संयम18/02/2026 02:36 PM (12 days later)
स्थितिप्रतिलिपि
VulDB प्रविष्टि346468 [Tsinghua Unigroup Electronic Archives System 3.2.210802(62532) /Search/Subject/downLoad download path निर्देशिका ट्रैवर्सल]
अंक0

Do you want to use VulDB in your project?

Use the official API to access entries easily!