CVE-2018-18315

com/mossle/cdn/CdnController.java in lemon 1.9.0 allows attackers to upload arbitrary files because the copyMultipartFileToFile method in CdnUtils only checks for a ../ substring, and does not validate the file type and spaceName parameter.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-10-15

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Lemon (Mossle)

References

• https://github.com/xuhuisheng/lemon/issues/175