A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/UploadImage.do of the component Endpoint. Suc…

A path traversal vulnerability has been discovered in Fujian Apex LiveBOS versions up to 2.0. The vulnerability affects the /feed/UploadImage.do file in the Endpoint component, where manipulation of the filename argument leads to path traversal attacks. The vulnerability can be exploited remotely and the exploit has been publicly disclosed. Organizations are advised to upgrade to version 2.1 to address this security issue. The public disclosure of the exploit increases the risk of active exploitation.