Directory Traversal in mee-admin 1.5 CommonFileController download
CVE-2023-42280 Published on September 21, 2023
mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading.
Products Associated with CVE-2023-42280
Want to know whenever a new CVE is published for Springernature Mee Admin? stack.watch will email you.
Exploit Probability
EPSS
0.37%
Percentile
59.13%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.