Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

Ash Admin path traversal vulnerability and Path.basename fix

github.com 2026-08-31 查看中文 →

Security Advisory High Ash Project

Affected:

ash-project/ash_admin@v1.31

Fixed in:

ash-project/ash_admin@4b4b41cb

Referenced CVEs: CVE-2026-82673 · 8.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

KamaIlo IMS: Diameter AVP Unsigned32 over-read with ASAN PoC 2026-08-31 AshAdmin Path Traversal CVE-2026-6273 POC: Arbitrary File Write 2026-08-31 AshAdmin CVE-2026-81831 Filter Injection: Analysis & PoC 2026-08-31 ash_admin composite PK decode filter oracle & decompression bomb fix 2026-08-31 Cookie Shadowing Fix: Exact Match for getCookie() 2026-08-31

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro