{"id":"CVE-2026-88392","published":"2026-10-05T15:17:22.857","lastModified":"2026-10-06T16:08:43.180","description":"Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an attacker to execute arbitrary code.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://github.com/fangtang7/CVE/blob/main/Unimall/file.md","tags":[]},{"url":"https://github.com/fangtang7/CVE/blob/main/Unimall/file.md","tags":[]}],"exploitRefs":[{"url":"https://github.com/fangtang7/CVE/blob/main/Unimall/file.md","tags":[]},{"url":"https://github.com/fangtang7/CVE/blob/main/Unimall/file.md","tags":[]}],"hasPoc":true,"ai":{"summary":"Unimall v4 allows attackers to perform directory traversal during file uploads, enabling them to write arbitrary files to the server's filesystem and potentially execute code. This vulnerability exists in the FileUploadController.local() method and can be exploited without authentication.","exploitability":"The exploit is straightforward to execute with no authentication required, as attackers can simply craft a malicious upload request that includes directory traversal sequences to write files outside the intended upload directory.","blast_radius":"If exploited, this vulnerability could allow attackers to upload malicious files such as web shells or configuration files that could lead to full system compromise and persistent access to the affected server.","remediation":"Upgrade to Unimall v4.1 or later, which contains the patched FileUploadController.local() method that properly sanitizes file paths during uploads.","detection":"Monitor for unusual file creation patterns in the web application's upload directory, particularly files with executable extensions (e.g., .php, .jsp) that appear without user interaction, and watch for HTTP requests containing directory traversal sequences like '../' in the filename parameter of POST requests to the file upload endpoint.","tags":["rce","file-upload","directory-traversal","web"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:03:54.099Z"}}