← Back

Novel Boutique House Plus Project

novel_boutique_house-plus_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Novel Boutique House Plus Project
1Novel Boutique House Plus
Jun 17, 2026
Apr 29, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allows attackers to read arbitrary files via the filePath parameter.