← Back

Novel Boutique House Plus

novel_boutique_house-plus

Vendor: Novel Boutique House Plus Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-30048
1Novel Boutique House Plus Project
1Novel Boutique House Plus
Jun 17, 2026
Apr 29, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allows attackers to read arbitrary files via the filePath parameter.