TI-2021-22765 CVE-2021-48014 · GHSA-wxvw-chm6-9q9h
Path traversal in FanRuan FineReport lets attackers write files
Priority HIGH 81
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter.