Threats tagged 'ghsa-xg84-7mcj-v6mx'

A path traversal vulnerability exists in Fujian Apex LiveBOS versions up to 2.0 in the /feed/UploadImage.do endpoint. This flaw allows remote attackers to manipulate the filename argument to access unauthorized files. The vulnerability has a CVSS score of 7.3 (high severity). Public exploit code has been disclosed. Upgrading to version 2.1 is recommended to remediate this issue.