← Database

CVE-2021-42967

CRITICAL CVSS: 9.8 Published: 2022-05-13 Modified: 2026-06-17

Description

Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files.

Affected Platforms

Xxyopen Novel-Plus

Weakness Type

CWE-434

References