CVE-2021-42967

Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-05-13

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Novel-plus (Xxyopen)

References

• https://github.com/201206030/novel-plus/issues/62