Submit #402346: 10Web CMS <=1.0 Path Equivalence: 'fakedir/../realdir/filename'

The JFinalCMS system /admin/template/edit interface has a security problem for reading arbitrary files

• Source: ⚠️ https://github.com/xingjiuW/cve/blob/main/wh.md
• User: xinjiuW (UID 74456)
• Submission: 09/04/2024 10:14 (2 years ago)
• Moderation: 09/11/2024 18:28 (7 days later)
• Status: Accepted
• VulDB entry: 277215 [JFinalCMS up to 20240903 com.cms.util.TemplateUtils /admin/template/update fileName path traversal]
• Points: 14