漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
h-moses moga-mall PmsProductController.java addProduct unrestricted upload
Vulnerability Description
A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability affects the function addProduct of the file src/main/java/com/ms/product/controller/PmsProductController.java. Such manipulation of the argument objectName leads to unrestricted upload. The attack may be performed from remote. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
moga-mall 代码问题漏洞
Vulnerability Description
moga-mall是h-moses个人开发者的一个基于微服务架构的电商平台。 moga-mall 392d631a5ef15962a9bddeeb9f1269b9085473fa及之前版本存在代码问题漏洞，该漏洞源于文件src/main/java/com/ms/product/controller/PmsProductController.java中函数addProduct对参数objectName的错误操作，可能导致无限制上传。
CVSS Information
N/A
Vulnerability Type
N/A