The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload arbitrary files, and any anonymous attacker can download them.
2026年9月4日
CVE-2026-75339 [HIGH] – The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks.
📑 文章目录
