CVE-2026-1111— PublicCMS 路径遍历漏洞

Sanluan PublicCMS Task Template Management TaskTemplateAdminController.java save path traversal

A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d. This impacts the function Save of the file com/publiccms/controller/admin/sys/TaskTemplateAdminController.java of the component Task Template Management Handler. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

对路径名的限制不恰当(路径遍历)

PublicCMS 路径遍历漏洞

PublicCMS是中国PublicCMS公司的一套使用Java语言编写的开源内容管理系统（CMS）。 PublicCMS 5.202506.d及之前版本存在路径遍历漏洞，该漏洞源于对文件com/publiccms/controller/admin/sys/TaskTemplateAdminController.java中组件Task Template Management Handler的函数Save的参数path的错误操作，可能导致路径遍历攻击。

N/A

N/A