high7.5
CVE-2023-42280
mee-admin 1.5 is vulnerable to Directory Traversal.
Impact
mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Springernature | Mee-Admin | Version 1.5 |