漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
xiweicheng TMS FileController.java upload unrestricted upload
Vulnerability Description
A vulnerability was detected in xiweicheng TMS up to 2.28.0. Affected by this issue is the function Upload of the file src/main/java/com/lhjz/portal/controller/FileController.java. The manipulation of the argument filename results in unrestricted upload. The attack may be performed from remote. The exploit is now public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
TMS 代码问题漏洞
Vulnerability Description
TMS是weicheng个人开发者的一个基于频道模式的团队沟通协作 + 轻量级任务看板。 TMS 2.28.0及之前版本存在代码问题漏洞，该漏洞源于对文件src/main/java/com/lhjz/portal/controller/FileController.java中函数Upload的参数filename的错误操作，可能导致不受限制的上传。
CVSS Information
N/A
Vulnerability Type
N/A