CVE-2026-3188

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3188", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-02-25T08:32:13.474Z", "datePublished": "2026-02-25T15:32:09.025Z", "dateUpdated": "2026-02-27T16:52:23.121Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-25T15:32:09.025Z"}, "title": "feiyuchuixue sz-boot-parent API templates path traversal", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-22", "lang": "en", "description": "Path Traversal"}]}], "affected": [{"vendor": "feiyuchuixue", "product": "sz-boot-parent", "versions": [{"version": "1.3.2-beta", "status": "affected"}, {"version": "1.3.3-beta", "status": "unaffected"}], "modules": ["API"]}], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This affects an unknown part of the file /api/admin/common/download/templates of the component API. Performing a manipulation of the argument templateName results in path traversal. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.3.3-beta is able to mitigate this issue. The patch is named aefaabfd7527188bfba3c8c9eee17c316d094802. It is recommended to upgrade the affected component. The project was informed beforehand and acted very professional: \"We have implemented path validity checks on parameters for the template download interface (...)\""}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-02-25T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-02-25T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-02-25T09:37:27.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "yuccun (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.347746", "name": "VDB-347746 | feiyuchuixue sz-boot-parent API templates path traversal", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.347746", "name": "VDB-347746 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.754041", "name": "Submit #754041 | feiyuchuixue https://github.com/feiyuchuixue/sz-boot-parent sz-boot-parent <= v1.3.2-beta Arbitrary_File_Read", "tags": ["third-party-advisory"]}, {"url": "https://github.com/yuccun/CVE/blob/main/sz-boot-parent-Path_Traversal_to_Arbitrary_Resource_File_Read.md", "tags": ["exploit"]}, {"url": "https://github.com/feiyuchuixue/sz-boot-parent/commit/aefaabfd7527188bfba3c8c9eee17c316d094802", "tags": ["patch"]}, {"url": "https://github.com/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta", "tags": ["patch"]}, {"url": "https://github.com/feiyuchuixue/sz-boot-parent/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-27T16:51:36.741352Z", "id": "CVE-2026-3188", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-27T16:52:23.121Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-3188", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-27T16:51:36.741352Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-27T16:51:55.843Z"}}], "cna": {"tags": ["x_open-source"], "title": "feiyuchuixue sz-boot-parent API templates path traversal", "credits": [{"lang": "en", "type": "reporter", "value": "yuccun (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 4, "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C"}}], "affected": [{"vendor": "feiyuchuixue", "modules": ["API"], "product": "sz-boot-parent", "versions": [{"status": "affected", "version": "1.3.2-beta"}, {"status": "unaffected", "version": "1.3.3-beta"}]}], "timeline": [{"lang": "en", "time": "2026-02-25T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-02-25T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-02-25T09:37:27.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.347746", "name": "VDB-347746 | feiyuchuixue sz-boot-parent API templates path traversal", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.347746", "name": "VDB-347746 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.754041", "name": "Submit #754041 | feiyuchuixue https://github.com/feiyuchuixue/sz-boot-parent sz-boot-parent <= v1.3.2-beta Arbitrary_File_Read", "tags": ["third-party-advisory"]}, {"url": "https://github.com/yuccun/CVE/blob/main/sz-boot-parent-Path_Traversal_to_Arbitrary_Resource_File_Read.md", "tags": ["exploit"]}, {"url": "https://github.com/feiyuchuixue/sz-boot-parent/commit/aefaabfd7527188bfba3c8c9eee17c316d094802", "tags": ["patch"]}, {"url": "https://github.com/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta", "tags": ["patch"]}, {"url": "https://github.com/feiyuchuixue/sz-boot-parent/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This affects an unknown part of the file /api/admin/common/download/templates of the component API. Performing a manipulation of the argument templateName results in path traversal. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.3.3-beta is able to mitigate this issue. The patch is named aefaabfd7527188bfba3c8c9eee17c316d094802. It is recommended to upgrade the affected component. The project was informed beforehand and acted very professional: \"We have implemented path validity checks on parameters for the template download interface (...)\""}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "Path Traversal"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-02-25T15:32:09.025Z"}}}, "cveMetadata": {"cveId": "CVE-2026-3188", "state": "PUBLISHED", "dateUpdated": "2026-02-27T16:52:23.121Z", "dateReserved": "2026-02-25T08:32:13.474Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-02-25T15:32:09.025Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["API"], "product": "sz-boot-parent", "vendor": "feiyuchuixue", "versions": [{"status": "affected", "version": "1.3.2-beta"}, {"status": "unaffected", "version": "1.3.3-beta"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in feiyuchuixue sz-boot-parent up to 1.3.2-beta. This affects an unknown part of the file /api/admin/common/download/templates of the component API. Performing a manipulation of the argument templateName results in path traversal. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.3.3-beta is able to mitigate this issue. The patch is named aefaabfd7527188bfba3c8c9eee17c316d094802. It is recommended to upgrade the affected component. The project was informed beforehand and acted very professional: \"We have implemented path validity checks on parameters for the template download interface (...)\""}, {"lang": "es", "value": "Una falla de seguridad ha sido descubierta en feiyuchuixue sz-boot-parent hasta 1.3.2-beta. Esto afecta una parte desconocida del archivo /api/admin/common/download/templates del componente API. Realizar una manipulaci\u00f3n del argumento templateName resulta en salto de ruta. La explotaci\u00f3n remota del ataque es posible. El exploit ha sido publicado y puede ser utilizado para ataques. Actualizar a la versi\u00f3n 1.3.3-beta puede mitigar este problema. El parche se llama aefaabfd7527188bfba3c8c9eee17c316d094802. Se recomienda actualizar el componente afectado. El proyecto fue informado de antemano y actu\u00f3 de manera muy profesional: 'Hemos implementado verificaciones de validez de ruta en los par\u00e1metros para la interfaz de descarga de plantillas (...)'"}], "id": "CVE-2026-3188", "lastModified": "2026-06-17T10:43:10.743", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3188", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-27T16:51:36.741352Z", "version": "2.0.3"}}]}, "published": "2026-02-25T16:23:30.203", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/feiyuchuixue/sz-boot-parent/"}, {"source": "cna@vuldb.com", "url": "https://github.com/feiyuchuixue/sz-boot-parent/commit/aefaabfd7527188bfba3c8c9eee17c316d094802"}, {"source": "cna@vuldb.com", "url": "https://github.com/feiyuchuixue/sz-boot-parent/releases/tag/v1.3.3-beta"}, {"source": "cna@vuldb.com", "url": "https://github.com/yuccun/CVE/blob/main/sz-boot-parent-Path_Traversal_to_Arbitrary_Resource_File_Read.md"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.347746"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.347746"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.754041"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.3.2-beta"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.3.3-beta"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "sz-boot-parent", "source": "cna", "vendor": "feiyuchuixue"}, "product": "sz-boot-parent", "vendor": "feiyuchuixue"}], "analysis": {"en": {"generated_at": "2026-04-18T10:41:56.640973+00:00", "value": {"mitigation_remediation": ["Upgrade to sz-boot-parent 1.3.3\u2011beta, which adds path validation on templateName.", "If an immediate upgrade is not possible, restrict or disable the /api/admin/common/download/templates endpoint or enforce strict authentication so that only trusted administrators can access it.", "Restrict access to the vulnerable endpoint to internal networks or enforce stricter network controls such as firewall rules to limit potential attackers."], "summary": {"action": "Patch", "impact": "Arbitrary File Read via Path Traversal"}, "threat_synthesis": {"affected_systems": "Affected versions are feiyuchuixue sz-boot-parent up to 1.3.2\u2011beta. The remediation is available in the 1.3.3\u2011beta release, which implements path validity checks for the template download interface.", "description_and_impact": "The vulnerability is a path traversal flaw in the API endpoint /api/admin/common/download/templates of feiyuchuixue sz-boot-parent. Manipulating the templateName parameter allows attackers to read arbitrary files on the host, resulting in unauthorized data disclosure. The flaw is a typical CWE-22 path traversal and is rated with a CVSS 5.3 score, indicating medium severity.", "risk_and_exploitability": "The flaw can be exploited remotely by sending crafted requests to the vulnerable API. While the EPSS score is below 1% and the vulnerability is not listed in CISA's KEV catalog, an exploit has been made publicly available. The risk is moderate, and the impact is unauthorized reading of files that may contain sensitive information. Applying the official patch is the recommended mitigation."}}}}, "created": "2026-02-26T13:15:51.501016+00:00", "updated": "2026-04-18T10:45:43.668353+00:00", "vendors": ["feiyuchuixue", "feiyuchuixue$PRODUCT$sz-boot-parent"]}