TI-2022-26425 CVE-2022-50973 · GHSA-2pg7-g8qf-mcv3Yonyou KSOA 9.0 Unauthenticated File Upload RCE via ImageUpload ServletPriority MEDIUM 51Yonyou KSOA 9.0 contains an unauthenticated arbitrary file upload vulnerability in the com.sksoft.bill.ImageUpload servlet that allows unauthenticated attackers to upload arbitrary files by submitting a POST request with…CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01519 · Published 2026-07-02 · No fix listed CWE-434
