MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCE
MineAdmin versions before 3.2.0-alpha.2 contain a path traversal vulnerability in the app-store plugin service. The identifier parameter is concatenated into filesystem paths without sanitization.
CVSS8.7EPSS 1.2%