Newbee-mall-plus vulnerabilities
We track 1 vulnerability in Newbee-mall-plus products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 30, 2025.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Newbee-mall-plus vulnerabilities
- 7.2 High severity
newbee-mall-plus: Unrestricted Upload of File with Dangerous Type
A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the file src/main/java/ltd/newbee/mall/controller/common/UploadController.java of the component Product Information Edit Page. This manipulation of the argument File