{"id":6182,"date":"2025-05-31T09:36:12","date_gmt":"2025-05-31T09:36:12","guid":{"rendered":"http:\/\/localhost\/?p=6182"},"modified":"2025-05-31T09:36:12","modified_gmt":"2025-05-31T09:36:12","slug":"ashinigit-xueshengzhusu-image-file-upload-upload-path-traversal","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=6182","title":{"rendered":"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal"},"content":{"rendered":"

CVE Details<\/h2>\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-05-31T14:00:13.164Z<\/td>\n<\/tr>\n
Last Seen<\/th>\n<\/td>\n<\/tr>\n<\/table>\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\nashinigit \u5929\u9752\u4e00\u767d<\/td>\n<\/tr>\n
Product<\/th>\nXueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf<\/td>\n<\/tr>\n
Version<\/th>\n4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb<\/td>\n<\/tr>\n<\/table>\n

CVSS Information<\/h3>\n\n\n\n\n\n\n
Base Score<\/th>\n5.3 (MEDIUM)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:4.0\/AV:N\/AC:L\/AT:N\/PR:L\/UI:N\/VC:L\/VI:L\/VA:L\/SC:N\/SI:N\/SA:N<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\n<\/td>\n<\/tr>\n
Integrity Impact<\/th>\n<\/td>\n<\/tr>\n
Availability Impact<\/th>\n<\/td>\n<\/tr>\n<\/table>\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nA path traversal vulnerability in the Image File Upload component of XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf allows remote attackers to manipulate file paths, potentially leading to unauthorized access or modification of system files. The vulnerability has been publicly disclosed and may be exploited. The product uses rolling releases, so specific affected versions are not available.<\/td>\n<\/tr>\n
AI Severity<\/th>\nHigh<\/td>\n<\/tr>\n
Vendor<\/th>\nashinigit \u5929\u9752\u4e00\u767d<\/td>\n<\/tr>\n
Product<\/th>\nXueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf<\/td>\n<\/tr>\n
Affected Version<\/th>\nup to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb<\/td>\n<\/tr>\n<\/table>\n

Additional Information<\/h3>\n\n\n\n\n\n
CVE List<\/th>\n<\/td>\n<\/tr>\n
CWE List<\/th>\nCWE-22<\/td>\n<\/tr>\n
Bulletin Family<\/th>\n<\/td>\n<\/tr>\n
Source Data<\/th>\nashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb<\/td>\n<\/tr>\n<\/table>\n

Source Information<\/h3>\n\n\n\n
Source Data<\/th>\nashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb<\/td>\n<\/tr>\n
Source Link<\/th>\n<\/a><\/td>\n<\/tr>\n<\/table>\n

Description<\/h3>\n
A vulnerability, which was classified as critical, has been found in ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf up to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb. This issue affects some unknown processing of the file \/upload\/ of the component Image File Upload. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.<\/div>\n

CVSS Score Summary<\/h3>\n
\n

Base Score:<\/strong> 5.3 (MEDIUM)<\/span><\/p>\n<\/div>\n

View Full CVE Details<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

CVE Details Basic Information Title ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal Type cve Published 2025-05-31T14:00:13.164Z Last Seen Product Information Vendor ashinigit…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,22,12,21,13,7,11,5],"class_list":["post-6182","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-53","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\nashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=6182\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal - zero redgem\" \/>\n<meta property=\"og:description\" content=\"CVE Details Basic Information Title ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal Type cve Published 2025-05-31T14:00:13.164Z Last Seen Product Information Vendor ashinigit...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=6182\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-31T09:36:12+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=6182#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=6182\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal\",\"datePublished\":\"2025-05-31T09:36:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=6182\"},\"wordCount\":313,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-5.3\",\"exploit\",\"MEDIUM\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=6182#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=6182\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=6182\",\"name\":\"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2025-05-31T09:36:12+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=6182#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=6182\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=6182#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=6182","og_locale":"en_US","og_type":"article","og_title":"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal - zero redgem","og_description":"CVE Details Basic Information Title ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal Type cve Published 2025-05-31T14:00:13.164Z Last Seen Product Information Vendor ashinigit...","og_url":"https:\/\/zero.redgem.net\/?p=6182","og_site_name":"zero redgem","article_published_time":"2025-05-31T09:36:12+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=6182#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=6182"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal","datePublished":"2025-05-31T09:36:12+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=6182"},"wordCount":313,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-5.3","exploit","MEDIUM","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=6182#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=6182","url":"https:\/\/zero.redgem.net\/?p=6182","name":"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2025-05-31T09:36:12+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=6182#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=6182"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=6182#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"ashinigit \u5929\u9752\u4e00\u767d XueShengZhuSu \u5b66\u751f\u4f4f\u5bbf\u7ba1\u7406\u7cfb\u7edf Image File Upload upload path traversal"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/6182","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6182"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/6182\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6182"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6182"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6182"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}