Threats tagged 'ghsa-9rf9-wxxc-3cr5'

A path traversal vulnerability exists in dromara lamp-cloud up to version 5.10.0 in the FileChunkController.java component's chunk-check endpoint. This vulnerability allows remote attackers to manipulate the 'Name' argument to perform unauthorized file path traversal. The vulnerability has a CVSS score of 7.3 (medium severity) and has been publicly disclosed. The project has been informed but has not yet responded or issued a fix.