Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory traversal in linlinjava/litemall/wx/web/WxStorageController.java in the litemall-wx-api component.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
litemall litemall-wx-api组件安全漏洞
Vulnerability Description
litemall是一套电子商务系统。litemall-wx-api是其中的一个针对微信的API（应用程序接口）组件。 litemall 0.9.0版本中litemall-wx-api组件的linlinjava/litemall/wx/web/WxStorageController.java文件存在安全漏洞。攻击者可借助‘../’目录遍历序列利用该漏洞下载任意文件。
CVSS Information
N/A
Vulnerability Type
N/A