A vulnerability was found in donglight bookstore???????? 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS
No CVSS.
References
Configurations
No configuration.
History
09 Jan 2025, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-09 04:15
Updated : 2025-01-09 04:15
NVD link : CVE-2024-13210
Mitre link : CVE-2024-13210
JSON object : View
Products Affected
No product.