漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Missing Input validation for filename in backups endpoint in Jellystat
Vulnerability Description
Jellystat is a free and open source Statistics App for Jellyfin. In affected versions Jellystat is directly using a user input in the route(s). This can lead to Path Traversal Vulnerabilities. Since this functionality is only for admin(s), there is very little scope for abuse. However, the `DELETE` `files/:filename` can be used to delete any file. This issue has been addressed in version 1.1.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Jellystat 路径遍历漏洞
Vulnerability Description
Jellystat是Thegan Govender个人开发者的一个免费开源统计应用程序。 Jellystat 1.1.2之前版本存在路径遍历漏洞，该漏洞源于直接使用用户输入在路由中，导致路径遍历漏洞，允许删除任意文件。
CVSS Information
N/A
Vulnerability Type
N/A