Remote Path Traversal Vulnerability in aaluoxiang oa_system Controller
A path traversal vulnerability exists in aaluoxiang oa_system up to version 5b445a6227b51cee287bd0c7c33ed94b801a82a5. The issue is located in the image function within the ProcedureController.java file. An attacker can remotely manipulate this vulnerability to potentially access unauthorized files or directories. The vulnerability details have been publicly disclosed, and there is a possibility that the exploit could be used. Since the product does not use versioning, determining the exact affected or unaffected releases is not possible.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
aaluoxiang oa system |