Westboy CicadasCMS Unrestricted File Upload Vulnerability

A critical vulnerability allowing arbitrary file upload has been identified in Westboy CicadasCMS version 1.0. This issue resides within the JSP Parser component, specifically in the '/upload/' directory. The vulnerability arises from improper handling of the 'File' argument, which enables unrestricted file uploads. This flaw can be exploited remotely, potentially allowing the upload of malicious files that could be executed within the application's environment.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads, including potentially malicious files that could be executed within the application's environment. This poses a significant risk, as it could be used to execute arbitrary code or disrupt normal application operations.