CVE-2025-56815 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo() to save the u…
High CVSS: 7.1

CVE-2025-56815

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo() to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name.
Vendor
Running-elephant
Product
Datart
CWE
CWE-22
Yayın Tarihi
2025-09-24 17:15:41
Güncelleme
2025-10-10 21:07:03
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-22 Datart HIGH Running-elephant 2025

Referanslar

https://github.com/running-elephant/datart/tags https://github.com/xiaoxiaoranxxx/CVE-2025-56815