cveboard RSS feed

CVE-2026-19757

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal

A vulnerability was found in Dromara lamp-cloud up to 5.10.0. This vulnerability affects unknown code of the file FileAnyoneController.java of the component File-Upload Controller. Performing a manipulation of the argument bucket/bizType results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

lamp-cloud

Vendor
Dromara
Product
lamp-cloud
Platforms
Unknown
Default status
Unknown
lamp-cloud · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
5.0affectedUnavailableUnavailableUnavailableNone listed
5.1affectedUnavailableUnavailableUnavailableNone listed
5.2affectedUnavailableUnavailableUnavailableNone listed
5.3affectedUnavailableUnavailableUnavailableNone listed
5.4affectedUnavailableUnavailableUnavailableNone listed
5.5affectedUnavailableUnavailableUnavailableNone listed
5.6affectedUnavailableUnavailableUnavailableNone listed
5.7affectedUnavailableUnavailableUnavailableNone listed
5.8affectedUnavailableUnavailableUnavailableNone listed
5.9affectedUnavailableUnavailableUnavailableNone listed
5.10.0affectedUnavailableUnavailableUnavailableNone listed