| 标题 | Four-Faith Water Conservancy Informatization Platform V1.0 Path Traversal |
|---|
| 描述 | A critical arbitrary file read vulnerability exists in the historyDownload.do endpoint, enabling unauthenticated attackers to read server files via crafted requests.
|
|---|
| 来源 | ⚠️ https://github.com/Cstarplus/CVE/issues/5 |
|---|
| 用户 | abc_123456 (UID 89341) |
|---|
| 提交 | 2025-08-31 10時12分 (1 年前) |
|---|
| 管理 | 2025-09-19 08時02分 (19 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 324997 [Four-Faith Water Conservancy Informatization Platform 1.0 historyDownload.do;otheruserLogin.do;getfile fileName 目录遍历] |
|---|
| 积分 | 15 |
|---|