CVE-2023-42280
mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading.
CVSS 3.1 · 7.5 High
EPSS 1.1%
KEV · Not listed
Vendors
Products