cld378632668 JavaMall Unrestricted File Upload Vulnerability in MinioController

A vulnerability allowing arbitrary file uploads has been identified in cld378632668 JavaMall versions through 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. The issue resides in the MinioController.java file, specifically within the Upload function. This vulnerability arises because the application fails to validate file extensions and does not prevent directory traversal, enabling attackers to upload any type of file. The vulnerability can be exploited remotely, potentially leading to severe consequences such as unauthorized code execution.

Impact

Exploitation of this vulnerability allows for unrestricted file uploads, which can be used to upload malicious files that may be executed on the server, leading to a compromise of the application or the underlying system.