Beschreibung
The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them.
EPSS 0.149%Risiko 0
Quelle öffnen- Veröffentlicht
- 2026-08-28 00:18:12
- Betroffene Versionen
- ==3.0.0
- Typ
- Webanwendung
- Zuletzt geändert
- 2026-08-28 00:18:12
- Vektor
- Pending