https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T14:49:23.731585+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-11320 CVE-2025-11320 — zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload 2026-10-15T14:49:23.756505+00:00

Affected: zhuimengshaonian wisdom-education

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.