high7.5
CVE-2019-17538
Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring.
Impact
Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jnoj | Jiangnan Online Judge | Version 0.8.0 |