CVE-2022-36671

Description

Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.

Affected Platforms

Weakness Type

CWE-494

References

• https://www.mesec.cn/archives/291
• https://www.mesec.cn/archives/291