CNNVD-202508-651 Information

CNNVD ID

CNNVD-202508-651

Related CVE

CVE-2025-29865

• CNNVD Published: 2025-08-07

Description (Chinese)

TAGFREE X‑Free Uploader是韩国TAGFREE公司的一个HTML5的文件上传/下载组件。 TAGFREE X‑Free Uploader 1.0.1.0084至1.0.1.0085之前版本和2.0.1.0034至2.0.1.0035之前版本存在安全漏洞，该漏洞源于容易受到路径遍历攻击。

Description (English)

TAGFRREE X-Free Uploader is an HTML5 document upload/download component of TAGFREE Korea. TAGFRREE X-Free Uploader 1.0.0084 to 1.0.1.0085 and 2.0.1.0034 to 2.0.1.0035 have a security loophole, which stems from their vulnerability to a routing.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

TAGFREE

Published

2025-08-07

Last Modified

2026-02-24

References

https://www.boho.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0000302&searchWrd=&menuNo=205023&pageIndex=1&categoryCode=&nttId=71825

Patch

https://www.tagfree.com/bbs/board.php?bo_table=wb_xfu_update