📦 Javamall

This CVE describes a path traversal vulnerability in JavaMall's MinioController delete function that allows attackers to delete arbitrary files on the server by manipulating the objectName parameter. ...

This vulnerability allows remote attackers to upload arbitrary files to JavaMall applications due to insufficient restrictions in the MinioController upload function. Any organization running affected...